Trustworthy AI, ISW Interviews – Pamela Gupta – ESW #335
Full Audio
View Show IndexSegments
1. What does it mean for AI to be trustworthy? – Pamela Gupta – ESW #335
The world of AI is exploding, as excitement about generative AI creates a gold rush. We've already seen a huge number of new GenAI-based startups, products, and features flooding the market and we'll see a lot more emerge over the next few years. Generative AI will transform how we do business and how we interact with businesses, so right now is an excellent time to consider how to adopt AI safely.
Pamela Gupta's company literally has "trust" and "AI" in the name (Trusted.ai), so we couldn't think of anyone better to come on and have this conversation with.
Interview Resources:
- Trusted AI Website
- The NIST AI Risk Management Framework
- Pamela's Podcast - Trustworthy AI: De-Risk Business Adoption of AI
Announcements
Security Weekly Listeners: We are celebrating the milestone of reaching over 1,000 members of our CISO community. The Cybersecurity Collaboration Forum is a one-stop shop for executive collaboration comprised of CISOs across various industries. If you want to be part of this growing community of CISOs, join us as a member or technology partner. To learn more, visit: securityweekly.com/cybersecuritycollaboration
Guest
Pamela Gupta is CEO of Trusted AI and a global industry expert on Digital Trust, Cybersecurity and AI Governance. With extensive global industry leadership experience in Business Strategy, Technology, emerging technology and Cybersecurity, Pamela is assisting companies with her expertise in critical areas such as achieving business value with AI in a dynamic risk environment.
Ms. Gupta helps clients adopt and succeed by creating a holistic risk based strategic Trustworthy digital foundation. She defined 8 essential pillars of trustworthy AI to help companies create and deploy AI programs that are effective, trustworthy and standardized.
Her insights have shaped the way we look at the impact of Cyberwarfare on Business, strategies for efficient digital transformation, and governance views on Algorithmic failures.
Pamela has been a thought leader on creating and implementing Trustworthy AI for over four years and has demonstrated it is essential to harness the power of AI.
Pamela has 25 years of experience defining Strategy and holistic approach to cybersecurity programs at Global Fortune 50 and above companies. She published holistic Strategic and practitioner’s approach to operationalize Governance – AI TIPS (Artificial Intelligence Transparency, Integrity, Privacy, and Security), a framework for operationalizing governance in building Trustworthy AI systems from the ground up.
Ms Gupta is a keynote speaker and presents regularly globally on AI Cybersecurity, what is Trustworthy AI and the criticality of Trustworthy AI to De-risk business adoption of AI. She has a podcast on all the major podcast platforms – Trustworthy AI: De-risk business adoption of AI.
Hosts
2. Getting Real with AI, Ending Point Solutions, InfoSec Burnout – Mike Campfield, Nathan Wenzler, Deidre Diamond – ESW #335
There's a lot of talk about AI, especially with the rise of apps like ChatGPT. Despite there being a huge amount of hype, there are legitimately practical applications for leveraging AI concepts in meaningful ways to improve the efficiency and effectiveness of your cybersecurity program. We'll discuss a few examples and show you some ways to bring AI out of the hype and into a proper tool to empower your security and risk program.
This segment is sponsored by Tenable. Visit https://www.securityweekly.com/tenableisw to learn more about them!
Threat actors don’t think in silos and neither should cybersecurity solutions. In this fireside chat with Uptycs’ newly appointed CRO, Mike Campfield, learn why organizations need to adopt a consolidation approach to win in cyber security, why it’s important to “shift up,” and what Mike is most excited about in his new role.
This segment is sponsored by Uptycs. Visit https://www.securityweekly.com/uptycsisw to learn more about them!
Deidre Diamond, founder & CEO of CyberSN, talks about her efforts to address InfoSec burnout and the skills shortage impacting the industry.
Guests
Mike Campfield is the new Chief Revenue Officer (CRO) at Uptycs. Mike comes to Uptycs from Safeguard Cyber where he was the CRO. Mike has helped scale many prominent technology companies such as Documentum, FireEye, ExtraHop, and EMC. Mike lives in Rhode Island with his wife, two teenage children, and three dogs. Mike loves to compete and you will often hear him quoting famous athletes and coaches (or a random movie reference).
Nathan Wenzler is the Chief Security Strategist at Tenable, the Exposure Management company. Nathan has over 25 years of experience both in the trenches of and as CISO of Information Security programs for public and private sector firms alike, often building them from scratch. He has also served as an executive management consultant and vCISO for C-suite execs across a wide array of Fortune 1000, nonprofit and government organizations looking to optimize, mature and accelerate their information security and risk management programs. Nathan’s focus areas include vulnerability and exposure management, PAM, incident response, process and workflow improvements, executive-level program management, and the human-focused aspects of InfoSec.
Today, he shares his insight on cybersecurity processes, programs, personnel improvements and communication strategies across the globe at conferences and directly with customers to help mature and accelerate risk management efforts for organizations of all shapes and sizes.
Deidre Diamond is the Founder and CEO of CyberSN, specializing in cybersecurity workforce risk management and strategic talent acquisition. Deidre Diamond launched her career straight out of college, guided by two pioneering entrepreneurs who employed her and provided growth opportunities for twenty-one years across three organizations, Motion Recruitment, Rapid7 (RPD), and Percussion Software. Deidre holds two college degrees in Sociology and Criminal Justice and her transition to cybersecurity was driven by a passion for the community and a vision to fix the broken job searching system. In 2014, she founded CyberSN, focusing on enhancing job matching with the CyberSN Taxonomy, leading the charge in cyber workforce risk management solutions.
Under Deidre’s leadership, CyberSN emerged as a premier talent intelligence firm in the U.S. Her commitment to diversity inspired the founding of Secure Diversity in 2015 and the co-founding of the Day of Shecurity Conference in 2017, which draws over a thousand women and underrepresented genders bi-annually for free knowledge-sharing. Deidre is a Board Member of Cyversity as of January 2024, an organization dedicated to diversifying the cybersecurity industry through education, empowerment, and innovative outreach programs. She is recognized as a Top 25 Women in Cybersecurity and is a sought-after speaker for some of the largest cybersecurity conferences in the world. Deidre’s contributions extend beyond CyberSN, advocating for gender diversity and fostering a culture that emphasizes retention and development across the cybersecurity landscape.
Host
3. Weaponizing Asset Intelligence, App Sec at ISW – Kevin Johnson, Brian Contos, Stacy Kooistra – ESW #335
As long as there are profits to be made, cybercriminals will continue to monetize enterprise assets—whether they be devices, applications, data, or users. It only takes one weak or unknown asset to compromise an entire organization. Brian will discuss why enterprises need to move away from assumption-based approaches to asset data and decision making to evidence-based asset intelligence to secure their environments quickly, easily, and at scale.
This segment is sponsored by Sevco Security. Visit https://www.securityweekly.com/sevcoisw to learn more about them!
In this ISW interview, CRA's Bill Brenner catches up with Kevin Johnson of Secure Ideas for a chat about application security.
In this segment from ISW, Dakota State COO and General Counsel Stacy Kooistra talks to Bill Brenner about the university's effort create more cyber warriors.
Guests
Kevin Johnson is the Chief Executive Officer of Secure Ideas. Kevin has a long history in the IT field including system administration, network architecture and application development. He has been involved in building incident response and forensic teams, architecting security solutions for large enterprises and penetration testing everything from government agencies to Fortune 100 companies. In addition, Kevin is a faculty member at IANS and was an instructor and author for the SANS Institute.
With two IPOs & eight acquisitions, Brian has helped build some of the most successful security companies in the world. He has over 25 years in the security industry as a security company entrepreneur, board advisor, investor, and author. After getting his start with the Defense Information Systems Agency (DISA) and later Bell Labs, Brian began the process of building security startups and taking multiple companies through successful IPOs and acquisitions, including Riptech, ArcSight, Imperva, McAfee, Solera Networks, Cylance, JASK, Verodin, and Mandiant.
Brian has worked in over 50 countries across six continents. He authored the book Enemy at the Water Cooler and co-authored Physical & Logical Security Convergence with former NSA Deputy Director William Crowell. He was featured in the cyberwar documentary 5 Eyes alongside General Michael Hayden, former NSA, and CIA Director. Brian writes for Forbes and regularly presents at conferences like Black Hat, RSA, OWASP, and BSides.
Stacy serves as the Chief Operating Officer and General Counsel for the Dakota State University Applied Research Corporation (DSU-ARC). DSU-ARC was founded in October of 2022 to perform and manage applied cyber research on behalf of Dakota State University, and in furtherance of the interests of South Dakota and national security.
Stacy also serves as the State Staff Judge Advocate for the South Dakota Air National Guard and the SD Army/Air National Guard Joint Staff, holding the rank of Colonel. He previously served as City Attorney for the City of Sioux Falls from September 2018 to March 2023.
In his private law practice from 2005-2018, Stacy’s primary areas of practice were civil and commercial litigation including contract/business law, construction law, family law, and general civil litigation matters. Since 2013, Stacy has held a Martindale-Hubble peer review rating of AV, which is the highest rating possible.
Prior to practicing law, Stacy served as a U.S. Army Military Intelligence Officer on active duty and in the South Dakota Army National Guard, and also has experience as an active-duty enlisted soldier, business manager, and professional basketball player in Sweden.