SPEAKER_00 0:00

John, we're back.

SPEAKER_01 0:01

We are back. Season two of the Candid CISO podcast. And Steve, I'll be honest, I've been looking forward to saying that out loud for quite a while now.

SPEAKER_00 0:10

Same, for anyone new, this is the show where experienced CISOs talk to CISOs. No BS insights, just real guidance and the stuff people usually only say after the conference panel ends.

SPEAKER_01 0:20

The hallway conversations, but here on the record. The best episodes weren't here's the framework. They were, here's what I got wrong, and here's what I do differently. That's what CISOs actually need from each other.

SPEAKER_00 0:31

So what's different this time around besides just being candid, John?

SPEAKER_01 0:35

The ground has shifted from under all of us. A year ago, most of the AI conversations in security were, should we let people use ChatGPT? Now organizations are deploying AI agents on so many different platforms that can read data, take action, and make decisions on their own at machine speed. And you know, that breaks a lot of the assumptions that we've built security programs on. Who's accountable when an agent acts? How do you give it an identity? How do you audit it? How do you even know which agent you're talking to?

SPEAKER_00 1:05

So that's the through line for season two. Can conversations on how the CISO role and the security program are changing in a world of agent decay. But to kick off season two, we're actually changing the format a bit, John. We're going to be live on the Stanford campus with Jason Chan.

SPEAKER_01 1:20

Yeah, we're going to be in person Thursday, October 8th at Stanford University. At the Anderson Collection, we'll have a reception up front and then a live recording of the show in front of a room of CISOs and security leaders. He led information security at Netflix and helped put out the paved road model, which makes the secure way the easy way, and developers will take it. This was the case where you can put in the guardrails and let people speed on through to get their stuff deployed at speed.

SPEAKER_00 1:46

And the title we came up with is The Paved Road is Dead.

SPEAKER_01 1:49

Long live the paved road. You know, when agents are writing code, making changes, taking actions, is there still a road? Who's driving on it? You know, so does the paved road need to be rebuilt for things that aren't human?

SPEAKER_00 2:02

Seats are limited, and if you're a security leader in the Bay Area, go to candidCISO.com, click on events, and find the Luma event to register. You can subscribe on Substack, uh, Apple Podcasts, or on Spotify, wherever you listen to podcasts, and tell a CISO friend who needs to hear this.

SPEAKER_01 2:18

Thanks, Steve. It is really great to be back.

SPEAKER_00 2:20

Great to be back, John. See you on the next episode.