On the 38th episode of Enterprise AI Defenders, host Mike Britton talks with TJ Mann, Global Chief Information Security Officer at Lockton. TJ argues the fastest path to resilience is not chasing every shiny tool; it is treating identity, APIs, and SaaS configuration as the new frontline, because attackers “don’t need to breach your network anymore,” they need one compromised identity, integration, or misconfiguration. He also breaks down how AI shifts email and impersonation risk toward hyper-personalized social engineering, and why Lockton is investing heavily in employee awareness, muscle memory for reporting, and identity-first controls to keep fraud from becoming a business process.

Quick hits from TJ:

On AI-driven impersonation: “We are seeing… hyper personalized social engineering… deepfake voice or face or audio or video or both.”

On what changed in cloud security: “Identity… is the new perimeter.”

On what attackers really need now: “The bad guys don’t need to breach your network anymore. They just need to compromise one identity, one integration or one misconfiguration.”

Recent Book Recommendation: Ikigai by Héctor García and Francesc Miralles

Like what you hear? Leave us a review and subscribe to the show on Apple, Spotify, and YouTube.

Enterprise AI Defenders is a show where security executives explain concrete threat shifts and the defenses that hold up in real environments. Find more great insights from technology leaders and enterprise software experts at https://www.enterprisesoftware.blog/

Enterprise AI Defenders is produced by Abnormal Studios.

On the 37th episode of Enterprise AI Defenders, hosts Evan Reiser and Mike Britton talk with Matt Posid, Chief Security Officer at KPMG US. AI accelerates the attacker’s playbook by increasing overall capability and reducing the time between vulnerability discovery and exploitation. Matt explains why KPMG consolidated cyber, insider risk, physical security, life safety, resilience, and third-party risk into one enterprise security program, and how defenders can keep up by pairing strong controls with AI-enabled workflows and clear governance.

Quick hits from Matt:

On how AI changes the threat curve: “AI is really good at a couple of things. It is really good at making people better, and it’s really good at making people faster.”

On deepfakes and why fundamentals still work: “The controls we’ve had to protect against non AI-based attacks are still, in many cases, effective against the AI-based variants.”

On the defender’s response, fight at AI speed: “If the bad guys are using certain tools, the good guys probably have to also, in order to keep up with the capabilities, the velocity that we need to defend.”

Recent Book Recommendation: Unreasonable Hospitality by Will Guidara

Like what you hear? Leave us a review and subscribe to the show on Apple, Spotify, and YouTube.

Enterprise AI Defenders is a show where top security executives share how moves to the cloud have created an evolved threat landscape that requires new tools to protect against cybercrime. Find more great lessons from tech leaders and enterprise software experts at https://www.enterprisesoftware.blog/.

Enterprise AI Defenders is produced by Abnormal Studios.

On the 36th episode of Enterprise AI Defenders, hosts Evan Reiser and Mike Britton talk with Chris Leigh, VP and Chief Information Security Officer at Eversource Energy. Chris leads security for a regulated, high-stakes utility serving millions across New England. He also owns AI in an uncommon org design that he uses to prove a point: governance does not have to slow innovation if it is built like an engineering function, with repeatable guardrails and clear pathways to ship.

Quick hits from Chris:

​​On shipping AI faster with standardization: “And that’s allowed us to accelerate our time to delivery by orders of magnitude of three months, down to four weeks, down to two weeks for various sprints.”

On preventing outages with drone inspection: “We’ve put some patterns out on this that allows us to better bring in the imagery and run it through our models and pick up damaged components or hotspots in the wires, which allows us to schedule and do repairs before we actually have power outages.”

​​On transforming threat intel into action for the SOC: “Any IOCs get popped into our tools automatically.”

Recent Book Recommendation: Outlive: The Science and Art of Longevity by Peter Attia, MD

Like what you hear? Leave us a review and subscribe to the show on Apple, Google, Spotify, Stitcher, or wherever you listen to podcasts.

Enterprise AI Defenders is a show where top security executives share how moves to the cloud have created an evolved threat landscape that requires new tools to protect against cybercrime. Find more great lessons from tech leaders and enterprise software experts at https://www.enterprisesoftware.blog/.

Enterprise AI Defenders is produced by Abnormal Studios.