Show Notes
AI is moving faster than most organizations can govern it, and Tom Dagger, CISO at ADM, explains why that speed is now a cybersecurity, compliance, and business risk problem all at once. If you care about AI in the enterprise, exposure management, or what happens when innovation outruns control, this conversation is essential listening. Tom and I get brutally honest about the reality behind AI adoption at a global enterprise. ADM is already using tools like ADM Chat, Microsoft Copilot, and AI-powered SaaS, but Tom makes the case that the real challenge is not whether to use AI - it is how to manage the constant churn of models, harnesses, data sharing, and operational risk without breaking the business.You’ll hear Tom break down the three buckets of AI usage every security leader needs to think about:
personal productivity tools like chatbots and copilots, AI embedded inside third-party SaaS platforms, and enterprise-built AI use cases that create real operational value.
We also dig into why “tokenomics,” model switching, and continuous patching are now board-level concerns, especially in regulated industries where a simple software change can mean downtime, lost productivity, or regulatory scrutiny. They unpack why vulnerability ops and exposure management are replacing old-school patch Tuesday thinking, and why security teams can no longer treat AI like just another software upgrade.The conversation gets even sharper when they turn to data governance and accountability. Tom warns that the biggest blind spot may not be model performance - it is the data being handed over to third parties, the hallucinations that can slip into workflows, and the dangerous myth that AI removes human responsibility. From fake legal citations to discriminatory automated decisions, the stakes are real, and the accountability still lands on the organization.They also look ahead at what AI and quantum could mean for transportation, manufacturing, food production, and even the future of entry-level jobs. As AI takes over more routine work, what happens to the ladder people traditionally climb to build experience? We go on to explore the long-term impact on talent pipelines, human judgment, and the roles that will still need a person in the loop. Essential listening for CISOs, security leaders, tech executives, and anyone trying to figure out how to adopt AI without surrendering control. This is a candid, practical conversation about where enterprise AI is headed, what can go wrong, and how leaders need to think now if they want to stay ahead. In this episode we bring cybersecurity, AI strategy, and real-world enterprise operations into one timely conversation. I hope you enjoy it!
More from Talking Innovation
AI is no longer “just a tool” - it’s becoming an assistant that can build, test, and operate across your stack. Grant and John Capobianco unpack why the real shift isn’t hype, but scale: from a watch-driven agent that checks router health to a future where millions of AI identities need their own infrastructure, security, and governance. Grant brings decades of perspective from Apple-era computing, DNS, SD-WAN, and network automation, while John, Head of AI and Developer Relations at Itential, shows how fast the ground is moving with Claude Code, mobile agents, and AI-assisted app creation. Together they draw a line from the first web pages to the next wave of agent-native systems. You'll discover:
AI is no longer just a productivity tool - it is becoming an operational risk, a security layer, and a new kind of business identity. Ben Wilcox, CISO and CTO at ProArc, explains why the old rules for governance, auditing, and trust are breaking fast, and what leaders need to do before agents start making real decisions on their own. Ben and I unpack the shift from clicks to prompts, from deterministic software to probabilistic behavior, and from human-only workflows to environments where machine identities may outnumber people. If you are responsible for security, data, cloud costs, or AI strategy, this conversation shows why visibility and guardrails matter more than ever. You’ll discover:
In this episode I sit down with Faryam Asif, CTO at Shufti, to unpack how identity verification is evolving as agents, deepfakes, and AI-driven attacks accelerate. The conversation focuses on how Shufti verifies individuals, businesses, and transactions, and why layered security is becoming essential in regulated industries. Faryam also explains how the company is adapting to new use cases like agent verification, age estimation, and audit trail requirements. Faryam explains how Shufti verifies individuals, businesses, and transactions across industries including financial services, healthcare, retail, gambling, social media, and crypto. We discuss document verification, facial biometrics, live selfie and video checks, address verification, NFC-based passport verification, KYB, and AML workflows. I raise the growing challenge of AI agents and asks how identity verification adapts when an automated agent, not just a human, is completing a workflow. Faryam introduces the emerging concept of KYA, know your agent, and explains why the industry is shifting toward verifying the person behind the action. We discuss how deepfakes and synthetic documents have lowered the cost and speed of fraud, making scalable attacks much easier than before. Faryam shares how Shufti is responding with layered verification, combining document checks, facial likeness, device intelligence, behavior analysis, risk scoring, media integrity, and database checks. The conversation explores how behavioral signals are becoming important as attackers learn to mimic human pauses and interaction patterns. We dig into compliance, auditability, and why regulated industries now need proof of how verification happened, not just who was verified. Faryam explains Shufti’s own technology stack, including proprietary facial liveness, document verification, OCR, transaction monitoring, KYB, AI, and ML systems. We cover deployment options and integrations, including on-premises hosting, cloud APIs, SDKs, and plugins for platforms like WordPress, Shopify, and Okta. Faryam also discusses Shufti’s global footprint, compliance posture, and use cases such as facial age estimation for social media and adult-content restrictions.I hope you enjoy it!
In this episode of Talking Innovation, I sit down with Walter Haydock, founder and CEO of Stack Aware, to explore the fast-evolving world of AI governance, cybersecurity, privacy, and compliance. Walter shares how his background in Marine Corps intelligence, counterterrorism, and government risk management shaped his approach to building a more quantitative, actionable way to assess and manage enterprise risk. The conversation covers why so many organizations still rely on outdated, “heat map” style risk assessments, how AI introduces new accountability challenges through its probabilistic nature, and why logging, monitoring, and human oversight matter more than ever. Walter also explains how Stack Aware helps AI-powered companies—especially in regulated industries—prepare for ISO 42001 certification, perform technical assessments, and build practical governance programs that close the gap between policy and reality. We also discuss the realities of AI adoption inside enterprises, the rise of employee-led tool usage, the tension between innovation and regulation, and what businesses need to do to stay competitive in a world where AI is no longer optional. It’s a wide-ranging, thoughtful discussion about risk, responsibility, and what it takes to govern AI well in the real world. I hope you enjoy it!
In this episode of Talking Innovation, I sit down with cybersecurity veteran Jon Oltsik for a wide-ranging conversation about the rapid rise of AI in security operations, the future of automation, and how work itself is being reshaped. Jon shares his perspective on the AI SOC, exposure management, agentic AI, and why human judgment will remain critical even as more tasks become automated. The discussion goes beyond cybersecurity into the broader impact of AI on business, healthcare, education, research, and everyday life. From smarter diagnostics and personalized learning to new career paths and simulation-based training, Jon and I explore how AI is already changing the way we work and learn... and what that means for the next generation of professionals. They also dig into the risks: data centralization, surveillance, cyber warfare, and the widening gap between organizations that are ready for this shift and those that are not. It’s a thoughtful, grounded, and future-facing conversation about opportunity, disruption, and the importance of staying adaptable in a fast-moving world. I hope you enjoy it!