I'm sitting through vendor pitches at the moment where "AI-powered" gets bolted onto everything, as if the…
Christian T. — Fractional CISO | Strategic Cyber, Technology & AI Advisor | Founder, Alvearium Associates
I'm sitting through vendor pitches at the moment where "AI-powered" gets bolted onto everything, as if the acronym alone fixes patch management. Had one this month that said it four times before telling me what the product actually did.
What I keep reminding boards is that most of the real work is unglamorous: know your assets, patch on a cadence, test your backups, and write down who's on call at 3am. None of that needs a large language model. It needs discipline, which is a much harder thing to put on a slide.
If your programme improved this year because you finally documented the incident response plan, rather than because you bought something with "AI" in the name, you're doing better than most of the pitches I sit through. Buzzwords don't stop breaches. Boring, repeatable process does.
6 reactions · 0 comments