Former CISO pitches four-question whiteboard threat modeling
Lora Vaughn told an ISC2 congress in Denver a short exercise can guide spending without a long report.
18
- Mentions · 7d7
- Mentions · 30d8
- All mentions8
- First seenOct 22, 2026
- Last mentioned1d ago
Timeline
8 articles · newest firstNvidia cyber policy chief says AI turns CISOs into risk translators
At ISC2 Security Congress, Mark Weatherford said boards should decide who accepts AI risk and avoid spending driven by fear of missing out.
24
Lawyer outlines three frameworks for CISO AI liability
Daniel Garrie told ISC2 attendees to score AI risk, record board appetite, and lock vendor evidence into contracts.
28
SBOMs missed scope of a Shai-Hulud supply-chain compromise
A stale SBOM called a SaaS environment clean while a hidden transitive dependency had already run.
52
ISC2 launches Cyber-AI Workforce Coalition for AI security jobs
The group will not write new standards; it aims for employer hiring toolkits, with a first meeting in November.
28
ISC2 expects first AI security certification in early 2027
The still-unnamed exam has six domains, a December 2026 beta, and a four-year experience rule with CISSP waivers.
32
Nvidia's Weatherford says CISOs must balance AI speed and risk
At ISC2 Strategic Congress 2026 he said year-round testing is now needed and FOMO is pushing rushed AI spending.
16
Microsoft security chief says sovereignty is a speed and risk choice
Halbheer says boards buy a location and assurance, while identity abuse and detection speed decide real control.
28
Appears with
- Nvidiavendor · 2
- MDASHproduct · 1
- BSIorganization · 1
- Microsoftvendor · 1
- Atlassianvendor · 1
- NISTorganization · 1
- European Commissionorganization · 1
- shai-huludmalware · 1
- Law and Forensicsorganization · 1
- Project Perceptionproduct · 1
- JAMSorganization · 1
- The Vaughn Grouporganization · 1
- CERT-Bundorganization · 1
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.