With the increase in targeted cyber attacks, it's more important than ever for organizations to quickly identify and respond to threats. AI is helping security teams by acting as virtual analysts, handling much of the investigation work. However, human oversight is still essential for the final steps and judgment.
Today's guest is Michael Lyborg. Michael is the Chief Information Security Officer at Swimlane. Prior to taking his current role, Michael was Global Vice President of Advisory Services, a highly sought-after expert by the world's largest Fortune 500 companies and global government agencies to advise on the creation and operation of industry-leading security operations.
In this episode Michael shares his experience and wisdom on today’s cybersecurity challenges. We talk about the balance of automation and human oversight, the risks and rewards of putting AI into security operations, and defense in depth strategies. Michael also covers how military style threat assessments can help with cybersecurity, how AI is evolving for threat prioritization and analysis, and the need for continuous testing and monitoring to prevent automation failures. If you want to know how to stay ahead in a complex cyber world, this episode is full of practical advice.
Show Notes: - [01:06] Michael has been with Swimlane for about 7 years mainly focusing on larger enterprises, government clients, and partners. He's helping with the automation journey and experience. He also built security programs for other companies and was a Marine.
- [02:07] Prior to the Marines, he did IT and network security. Michael is originally from Sweden.
- [04:22] Operational risk management or conducting a limited threat assessment. He's always thinking like a hacker and looking for gaps in security.
- [06:29] Michael tells a story about his wife's recent experience with a cybersecurity scam.
- [12:11] How a company decides what level of friction is appropriate to implement proper security.
- [13:59] Michael talks about balancing what is and isn’t automated.
- [16:16] Michael shares the story about his early days of automation.
- [17:23] Continuously review and monitor your automations.
- [18:41] Starting with documentation is a good first step.
- [21:45] Michael talks about how awesome it is being able to work in security and automation and help businesses grow and achieve outcomes. He believes in automating the mundane tasks.
- [22:26] We learn about AI being involved in the defensive side of cybersecurity.
- [24:50] AI can also bridge the gap between the security team and non-technical people.
- [26:33] We discuss places where AI probably shouldn't be used.
- [27:58] Find where AI works for you and then think about incorporating it in your security services.
- [31:01] The importance of having controls in place when using AI whether it's for security or data analysis.
- [33:00] Risk can be reduced by training on specific tasks.
- [34:18] Michael shares the value of mixing human and artificial intelligence through Swimlane.
- [39:08] The importance of bridging gaps and getting rid of silos.
Thanks for joining us on Easy Prey. Be sure to subscribe to our podcast on iTunes and leave a nice review.
Links and Resources: - Podcast Web Page
- Facebook Page
- whatismyipaddress.com
- Easy Prey on Instagram
- Easy Prey on Twitter
- Easy Prey on LinkedIn
- Easy Prey on YouTube
- Easy Prey on Pinterest
- Michael Lyborg on Swimlane
- Michael Lyborg on LinkedIn