AI: Your Next Tool or New Colleague? Next-Gen Security Skills with Priyanka Chatterjee
How security teams should adopt AI in operations, the shift from knowledge to skills economy, and what next-gen practitioners need to succeed.
Resources
Security Leadership
CISO insights, security culture, governance, risk management, and building security teams.
62 resources — 6 blogs · 12 learn · 43 podcasts · 1 use case
PAM for Cloud Infrastructure: Why Traditional PAM Falls Short and What to Do
Traditional PAM tools were built for on-premise infrastructure. This article breaks down exactly where they fall short in cloud environments — and what cloud-native privileged access management looks like in 2026.
What Is a Cloud Security Graph?
A cloud security graph connects assets, identities, permissions, networks, workloads, data, and findings so teams can understand real risk paths.
What Is EPSS?
EPSS estimates the probability that a software vulnerability will be exploited, helping teams prioritize remediation beyond CVSS alone.
What Is Model Context Protocol (MCP)?
Learn what MCP is, why AI agents use it, and how security teams can govern tool access, credentials, audit trails, and cloud actions safely.
What Is OCSF?
OCSF is an open cybersecurity event schema that helps normalize security data across tools, clouds, applications, and detection pipelines.
What Is Wazuh?
Wazuh is an open-source security monitoring platform for log analysis, endpoint telemetry, file integrity monitoring, vulnerability detection, and compliance.
Why Excel Is the Biggest Security Risk in Your User Access Review Process
Excel-based User Access Reviews create compliance gaps, stale data, and audit failures. Learn the 5 security risks of spreadsheet UAR and how automation solves them for ISO 27001, SOC 2, and PCI-DSS.
Shifting the Security Culture: From Friction to Flow with Sana Talwar
Build a developer-friendly security culture in 2026. Learn to manage AI risks like prompt injection, prioritize actual risk, and secure open-source libraries.
Engineering Resilience: A Strategic Guide to Building a Modern Security Culture
Dakota Riley shares how to build modern security culture through Policy as Code, engineering ownership, toil reduction, and psychological safety.
Securing the SDLC in the AI Era: Culture, Champions, and Defense in Depth with Ashish Bhadouria
Ashish Bhadouria of IKEA shares how to integrate security into SDLC through culture, champions programs, and defense in depth for AI apps.
Masterclass In Cloud Security Risk Management With Joseph Haske
Joseph Haske shares insights on qualitative vs quantitative risk analysis, building a risk culture, and practical frameworks for cloud security risk management.
Scaling Security Champions: From Compliance to Culture
Learn how to scale security champions by bridging the gap between engineering and strategy. Discover metrics, business alignment tips, and burnout prevention.
The Secrets of Cloud Security: Navigating Identity, Ephemerality, and the Multi-Cloud Frontier
Discover the secrets of cloud resilience. Learn about the 45:1 machine identity ratio, multi-cloud strategy, and why on-prem habits fail.
The Human Firewall: Designing for Behavior in Modern Security
Cassie Clark explains how behavioral design, choice architecture, and System 1/System 2 thinking build a resilient, no-blame security culture.
Security as a Growth Enabler: GRC Maturity and Building Trust with Andy Welch
Fractional CISO Andy Welch shares how to turn security into a business enabler, mature GRC programs, and overcome vendor sprawl.
The Future CISO: AI, Quantum, and Becoming a Multidisciplinary Strategist with Patricia Titus
Field CISO Patricia Titus explains how CISOs must evolve into multidisciplinary strategists who lead through AI, behavioral analytics, and trust.
What is AWS CloudTrail? Complete Guide to AWS Audit and Governance
Learn about AWS CloudTrail for governance, compliance, and security auditing. Discover benefits, features, and how to secure your AWS infrastructure.
What is Cloud Audit?
Run effective cloud audits to uncover misconfigurations, verify compliance, and strengthen your security posture. Covers internal, external, and security audits.
AI Code Remediation: From Detection to Resolution
A paradigm shift that moves beyond mere vulnerability detection to automated, intelligent code repair using AI techniques.
The Human Element in Threat Detection: Culture, AI, and Collaborative Response
Pablo Vidal shares how to build a world-class detection and response program using psychological safety, automation, and generative AI.
The Secrets of Product Security: Scaling AppSec with Empathy and Secure-by-Default Frameworks with Anshuman Bhartiya
Learn how secure-by-default frameworks help scale application security, reduce developer friction, and embed security into engineering workflows.
The Human Element: AI, Deepfakes, and the Evolving Threat Landscape with Perry Carpenter
Perry Carpenter explores how AI amplifies scams, why deepfakes are nearly undetectable, and how to strengthen the human layer through culture.
Building A Resilient Security Culture With Mauricio Duarte
Mauricio Duarte shares how to build resilient security culture by integrating awareness with incident response and embracing human-centered security.
Balancing Security And Innovation
CISO Ross Young shares strategies for balancing security and innovation, managing burnout, vulnerability management, and the impact of generative AI.
Trust as the Invisible Perimeter: Building a Culture of Security at Scale
Sandeep Agarwal shares why culture beats tools in cybersecurity and how to build trust, blameless postmortems, and real-time audits at scale.
Why Auto-Remediation is the Security Janitor Every AWS Environment Needs?
Lily Chau details her dual-track AWS cloud security strategy focusing on secure defaults and auto-remediation for self-healing environments.
Architecting Cloud Security: Building Foundations and Boundaries with Kushagra Sharma
Kushagra Sarma explains how to architect cloud security foundations using layered baselines, dynamic boundaries, and threat intelligence at scale.
Building Cybersecurity Teams
Matthew Marji shares strategies for building cybersecurity teams, embedding security into engineering culture, and fostering collaboration and trust.
The Science of Hiring Cybersecurity Professionals
Build a strong cybersecurity team by hiring for aptitude, empathy, and communication skills. Learn what CISOs prioritize and how to set OKRs over KPIs.
Emotional Intelligence - CISO(s) POV
Why CISOs need emotional intelligence: master self-awareness, empathy, and social skills to lead security teams, manage crises, and build a security culture.
Building Cybersecurity Teams and the Virtuous Circle with Clients: Lessons from Jesse Miller
Jesse Miller shares how to hire for aptitude over credentials, why startups need a generalist first, and how to build a virtuous security circle.
Enterprise Risk Management: Building a Proactive Cyber Defense from the Ground Up
Amit Subhanje shares how to build a proactive enterprise risk management framework, from basic cyber hygiene to fostering organizational accountability.
Navigating the Extended Ecosystem: A Strategic Guide to Third-Party Risk Management
Jeffrey Wheatman shares strategies for third-party risk management, from vendor prioritization to communicating cyber risk to business stakeholders.
The Human Element: Mastering Emotional Intelligence in Cybersecurity Leadership
Shivani Arni, CISO at TransUnion CIBIL, shares how emotional intelligence drives resilient security programs and builds psychological safety.
Taming the Transitive Rabbit Hole: A Strategic Guide to Supply Chain and Application Security
Master supply chain security in 2026. Learn how to use SBOMs, artifact scanning, and the SLSA (Salsa) model to secure your 10-level deep dependencies.
Beyond the Blame Game: Restorative Justice and the Human Side of Security
Move beyond the blame game. Learn how Restorative Justice framework transforms security culture, eliminates shame, and aligns security with DevOps velocity.
Application Security, Threat Modeling, and Building Security Champion Programs with Dustin Lehr
Build security champion programs, create security-first culture, implement controls from production, and when security is not a day-one priority.
Building Security Culture Through Empathy, Influence, and Shared Ownership with Ariel Shin
Build a security-first culture through empathy, developer relationships, shared vulnerability ownership, and scaling influence across engineering.
Application Security Beyond Tools: People, Process, and Governance with Chris Romeo
Why AppSec is more than tooling, how to introduce threat modeling into existing codebases, and what startups should prioritize for security.
Cyber Risk Management, DevSecOps Alignment, and Data Loss Prevention with Chris Hodson
Align security in DevOps environments, communicate risk to executives, and rethink data loss prevention for the modern enterprise.
Practical Threat Modeling: Prioritization, Developer Training, and Building Security Culture with Jeevan Singh
Why threat modeling is the cheapest way to fix vulnerabilities, how to train developers, and how to sell security investment to executives.
Vulnerability Management Deep Dive: EPSS, SBOMs, and Risk-Based Prioritization with Walter Haydock
Why EPSS beats CVSS for vulnerability prioritization, how to build an effective SBOM program, and who should own risk decisions.
Into the Dark Web: Cybercrime Evolution and Defense Strategies with Brett Johnson
How the dark web evolved from Tor to Telegram, why credential stuffing bypasses MFA, and what experts recommend for cyber defense.
GRC Programs and Data Privacy Compliance with Alyssa Ahmann
Learn how to build GRC programs from scratch, navigate GDPR and CCPA compliance, and avoid common implementation pitfalls in your organization.
Incident Response, MFA Fatigue, and Building Security Culture with Nader Zaveri
Learn how to prepare for breaches with IR plans, combat MFA fatigue attacks, and build an accountability-driven security culture.
Data Privacy and Governance Fundamentals with Adam Smith
Learn how to build data privacy programs, implement data governance, navigate GDPR and CCPA compliance, and create a privacy-first culture through recognition.
Cloud Vulnerability Management and Empathy-Driven Security Leadership with Ray Espinoza
Learn how to prioritize cloud vulnerabilities with context, build security culture through empathy, and respond transparently to incidents.
Measuring Security Debt and Building Security Culture with Garrett Smiley
Learn how to define, measure, and prioritize security debt, why KRIs outperform KPIs for security teams, and how to build rapport-driven security culture.
Mastering Organizational Security Culture in Product Engineering with Trupti Shiralkar
Learn how to embed security into product development, build security champions programs, manage security debt, and tackle supply chain risks.
Security Debt and Building Risk-Driven Security Programs with Aakash Yadav
Learn how to quantify security risks, manage security debt, tackle supply chain challenges, and why risk-driven programs outperform compliance-driven ones.
Information Security and Risk Management Fundamentals with Parul Khanna
Learn how to build risk management programs, prioritize security debt, implement incident response plans, and protect sensitive data from social engineering.
Common Cybersecurity Mistakes and Building Security Programs with Mel Reyes
Learn how to avoid costly cybersecurity mistakes, build security programs from scratch, and navigate M&A security challenges from a veteran CISO.
Zero Trust Implementation, Security Debt, and Executive Communication with Vincent Romney
Implement zero trust with NIST 800-207, manage security debt without stalling growth, and communicate risk to executives effectively.
Preparing for Cloud Data Breaches: Incident Response, Trust Recovery, and Security Metrics with Nat Shere
How to prepare for data breaches with incident response planning, transparent breach communication, and the two metrics every security team needs.
Cybersecurity For Every User
Learn essential cybersecurity practices every user should know, from strong passwords and phishing prevention to device security and data backup strategies.
Best Practices For AWS CloudTrail
AWS CloudTrail tracks user activity and API usage for compliance and security auditing. Learn best practices for log validation, encryption, and monitoring.
A Guide About Priorities For Chief Information Security Officer (CISO)
Explore CISO priorities including identity management, zero trust, DevSecOps, IoT security, and how to lead security strategy during uncertain times.
Learn
What Is Shift Left Security
Understanding DevSecOps principles to build secure software and streamline remediation across teams.
Learn
What Is Third Party Risk Management
Information security and privacyData center securityCloud infrastructure securityApplication security
Learn
What Is Threat Modeling
Explore how early threat detection and mitigation during design prevents costly breaches.
Ready to see your graph?
Connect a cloud account in under 30 minutes. See every finding rooted in identity, asset, and blast radius — with a fix path attached.
Book a Demo