Have you ever been caught by surprise by a question, comment, or remark in a social, academic, or business setting? Most likely you have been, and you probably also wished you could have had a bit more time to prepare a more suitable, fitting, or witty response. Instead of being given time to act strategically, you were forced to react tactically. Not surprisingly, the results are often far from ideal.
If we take a step back and consider this concept, there is an important security lesson we can learn here. Security organizations are better able to secure the enterprises they defend when they are given a chance to act strategically, rather than react tactically. When it comes to application security, that necessitates involving the security team and building in security much earlier in the software development lifecycle.
In recent years, most security practitioners have been watching the AI hype cycle very carefully. Indeed, the explosion of AI onto the scene brought with it many unresolved questions around governance, risk, and compliance. While security practitioners considered these questions strategically and carefully, they were left wondering why, if AI was such a hot topic, they weren’t seeing it affect their lives very much operationally.
