Send us Fan Mail

New to AI Security Multipliers? Start here.

In this short introduction, Steve explains what the podcast is about, why he created it, and the perspective he brings to the rapidly changing worlds of AI, cybersecurity and governance.

No hype. No fearmongering. Just practical conversations about what matters, what’s changing, and how we can use AI to multiply what people and organizations are capable of achieving.

Send us Fan Mail

AI Is Coming for Cybersecurity

We hear plenty about how attackers are going to use AI. But what about the defenders?

In this episode of AI Security Multipliers, Steve looks at the other side of the AI security story: how AI can help cybersecurity teams work faster, prioritize better, investigate incidents, improve detection, strengthen identity security, and deal with the enormous amount of information modern security environments generate.

From SOC operations and threat hunting to vulnerability management, incident response, phishing defense, and security awareness, the opportunity isn't about replacing security professionals. It's about giving them more time to think and multiplying what they can accomplish.

We also tackle the harder question: how much should AI actually be allowed to do on its own?

And in this week's Multiplier, there's a simple place to start: ask your security team what repetitive task they wish they didn't have to do.

AI is coming for cybersecurity.

Good. Let's use it.

Send us Fan Mail

AI governance is supposed to help organizations use AI safely. But what happens when the governance itself becomes the reason people go around it?

In this episode of AI Security Multipliers, Steve explores how organizations can govern AI without becoming the Department of No.

As AI adoption accelerates, many organizations are responding with policies, committees, risk assessments, approval processes and new governance structures. Those controls can be important, but treating every AI use case as though it carries the same level of risk can quickly create bureaucracy rather than meaningful governance.

A developer using an approved AI tool to explain non-sensitive code isn't the same risk as an autonomous agent capable of changing production systems or approving financial transactions.

So why would we govern them the same way?

We look at how risk-tiered governance can create a faster path for low-risk AI use while applying greater scrutiny where the consequences actually matter. We also explore why organizations should build on existing security, privacy, data, procurement and technology governance rather than creating an entirely separate AI bureaucracy.

Because good governance shouldn't make safe AI harder to use.

It should make the safe path the easiest path.

In this episode:
• Why AI governance can unintentionally create Shadow AI
• Why organizations should govern the risk, not the buzzword
• How risk tiers can prevent every AI use case becoming a major approval exercise
• Why governance should start with the business use case
• How to create a fast path to yes
• Why approved AI platforms and safe experimentation environments matter
• How existing security, privacy, data and technology governance can support AI
• Why AI policies need to be understandable enough that employees actually read them
• How cybersecurity can become an accelerator rather than a gatekeeper
• Why AI governance needs to evolve as capabilities change
• How to measure whether your governance model is actually working
• The role of executives and boards in AI oversight
• Practical steps for improving your AI governance process now

The Multiplier:
Take your organization's AI governance process and actually try to use it.

Choose a simple, low-risk AI use case and follow the process from beginning to end.

How many forms?
How many approvals?
How many meetings?
How many days?

And most importantly:

At any point would a reasonable employee decide it was easier just to go around you?

If the answer is yes, don't immediately blame the employee.

Fix the path.

Because one of the best ways to reduce Shadow AI isn't another monitoring tool. It's making approved AI easier to use than unapproved AI.

Good governance doesn't just control risk. It creates a faster path to yes.

Govern the risk, not the buzzword.