Nvidia cyber policy chief says AI turns CISOs into risk translators
Original title: AI Is Turning CISOs Into Business-Risk Translators, Says Nvidia’s Head of Cyber
At ISC2 Security Congress, Mark Weatherford said boards should decide who accepts AI risk and avoid spending driven by fear of missing out.
Nvidia head of cybersecurity policy Mark Weatherford told ISC2 Security Congress 2026 in Denver on October 26 that broad workplace AI use has shifted CISOs from gatekeepers to translators of business risk. He said CISOs rarely own the business risk of deploying AI but must explain tradeoffs and who accepts them. He cited the pace of change and the need for both security for AI and AI for security, and warned against fear-of-missing-out spending. He also urged scrutiny of AI-native products and multi-tier supply-chain dependencies.
- Weatherford recommended a short plan stating proposed risk-reduction work and required resources.
- He prefers AI-native products over older products with AI added later.
- He suggested learning one AI topic a week, naming MCP, prompt injection or sandboxing.
- He said he created a CISO Exchange Network with Nvidia partners, customers and suppliers.
From the original article
2 min read at infosecurity-magazine.com
Nvidia’s Mark Weatherford says CISOs must translate AI cybersecurity risks into business priorities, clarify risk ownership and balance innovation with security controls
By Kevin Poireault · infosecurity-magazine.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.