Skip to content
NewA calmer, faster ZeroHour
StoryAI industryinfo

Nvidia cyber policy lead says AI shifts CISO role to risk translation

2 sources · 2 articlesFirst reported Updated ()1
What's new

October 28: Infosecurity Magazine adds Weatherford’s October 26 remarks on board risk acceptance, AI-native products, supply chains, a short resourcing plan, and a CISO Exchange Network.

Merged summary · x-ai/grok-4.7 · rewritten as coverage arrivesSummaries by Vani AI

Nvidia’s Mark Weatherford told ISC2’s 2026 Denver congress that CISOs must translate AI risk while boards decide who accepts it.

At the ISC2 congress in Denver, Nvidia cybersecurity policy lead Mark Weatherford said broad workplace AI use is moving CISOs from gatekeepers toward translators of business risk. He said CISOs rarely own the risk of deploying AI and must explain tradeoffs and who accepts them, while boards should decide acceptance. He called speed the main challenge, said testing four times a year is no longer enough, and warned that fear of missing out is driving AI spending without clear business value. He also urged scrutiny of AI-native products and multi-tier supply-chain dependencies, and said security is needed both for AI and from AI.

Key facts
  • Weatherford spoke in Denver on October 26, 2026, according to Infosecurity Magazine.
  • He said CISOs rarely own AI deployment risk and must name who accepts it.
  • He said penetration testing four times a year is no longer enough.
  • He warned against FOMO-driven AI spending and a default security refusal.
  • He prefers AI-native products and urged review of multi-tier supply chains.
  • He said he created a CISO Exchange Network with Nvidia partners, customers and suppliers.
Explain this AI news with Vani AIWhat was announced, what is new and why it matters, in a new chat

Timeline

dated events in the reporting · oldest first
  1. Oct 26, 2026Weatherford speaks on AI and CISO risk at ISC2 congress · Infosecurity Magazine

What each outlet adds

beyond the shared facts
  • Dark ReadingYear-round testing, command by negation, and his prior DHS and state roles.
  • Infosecurity MagazineBoard risk ownership, AI-native preference, weekly learning, and CISO Exchange Network.
Vendors
Nvidia
Organizations
ISC2

Coverage

oldest first · one row per article · UTC
  1. · 4d ago Dark ReadingFirst report

    Nvidia's Weatherford says CISOs must balance AI speed and risk

    At ISC2 Strategic Congress 2026 he said year-round testing is now needed and FOMO is pushing rushed AI spending.

  2. · 2d ago Infosecurity Magazine

    Nvidia cyber policy chief says AI turns CISOs into risk translators

    At ISC2 Security Congress, Mark Weatherford said boards should decide who accepts AI risk and avoid spending driven by fear of missing out.