CXOInsights by CXOCIETY

CXOCIETY | FutureCIO FutureCFO FutureIoT
  • 0.0 (0)
  • Management
  • Weekly

CXOCIETY (read "society") is the platform for senior business, technology, finance and operations executives to discuss, share and discover the latest in technology, process and people innovation."CXOInsights" by CXOCIETY is the repository of shared insights and experiences by the best, brightest and most experienced professionals globally. Subscribe to "CXOInsights" by CXOCIETY to keep abreast in the latest in all things innovation.

  1. 3d ago

    PodChats for FutureCISO: Turning fragmented identity data into actionable privilege‑path intelligence for AI agents

    The convergence of fragmented identity data and accelerating AI agent deployment creates a distinctive set of pressures for security leaders in Southeast Asia and Hong Kong. Regional research reveals that while agentic AI adoption outpaces resilience planning, only 34% of organisations have extended resilience planning to non-human identities—with Hong Kong showing particularly acute gaps at 23%.  Singapore faces parallel pressures: 95% of organisations report feeling pressured to loosen identity controls for AI, while only 14% can always explain why an AI agent took a privileged action. Meanwhile, Hong Kong’s financial regulators are actively piloting “Know Your Agent” frameworks for payment workflows, signalling a regulatory trajectory that will reshape compliance expectations.  Recognising that non-human identities are proliferating much faster as organisations deploy AI agents into their workflow, a recurring and in my opinion expanding challenge for CISOs and CIOs is how to turn fragmented identity data into actionable privilege‑path intelligence for AI agents. I recently had the opportunity to speak to James Maude, Field Chief Technology Officer at BeyondTrust, for his perspective on the topic. 1.       Before we head straight into our topic, I wanted to get your perspective on something I have been observing for more than 10 years now. The cybersecurity tech stack continues to grow in complexity with the proliferation of best-of-breed standalone security tools. Since 2021 however, we’ve seen an aggressive consolidation. What is your take on this?  2.       Music to the ears of the CFO I am sure. Anyway, From your observation, what is the true scope of non-human identity proliferation across organisations’ environments in Asia, and how confident are CISOs in the completeness of that picture? 3.       How do you see enterprises, and their CISOs, governing the privilege paths that connect AI agents to critical assets? (working and not working well)  4.       When an AI agent takes a privileged action, is it possible to reconstruct the full chain of authority that permitted it in the first place?  5.       If an AI agent is compromised or behaves unexpectedly, can you suggest performing containment and recovery strategies (best practice) that have proven to be effective? In this context, what won’t work and why? 6.       How should CISOs balance the business pressure to grant AI agents broad access for productivity against the principle of least privilege? 7.       How should CISOs align with emerging regulatory expectations for agent identity governance across the jurisdictions they operate in? 8.       What is privilege-path risk and what metrics should CISOs use to demonstrate that privilege-path risk is shrinking (which is good), not just being monitored? 9.       Who owns AI agent identity risk at organisations in Asia—and is that ownership sustainable across the silos where agents operate? 10.   2027, advise for CISOs and CIOs? What should worry them as enter 2027?

    PodChats for FutureCISO: Turning fragmented identity data into actionable privilege‑path intelligence for AI agents

  2. Oct 23

    PodChats for FutureCIO: Not getting fired because of ungoverned AI agents

    Employees who use unauthorized AI tools face personal liability that extends far beyond data exposure. In Singapore, a lawyer was ordered to personally pay costs for citing a fictitious case generated by AI, and law firms now treat AI policy breaches as sackable offences. A Sydney developer lost his unfair dismissal case after AI-assisted emails became "combative" and "ungovernable". These examples suggest that employees remain accountable for the tools they use at work. In this PodChats for FutureCIO, Richard Jones, VP and GM for APJ, Denodo, discusses why accountability -remains in place even when we delegate actions to robots. 1.       Most IT leaders claim full visibility into AI tools, yet most also admit unapproved AI is common. If a data leak happens through an ungoverned agent tomorrow, can you demonstrate visibility—or just the appearance of it? 2.       Many leaders believe shadow AI makes employees more productive, even as most report negative AI incidents. How do you make the case for governance without being seen as the CIO who slows things down? 3.       Most organisations encourage AI companions and agent use, but fewer than half have clear governance for it. When an ungoverned agent causes an operational incident, what is the CIO’s personal exposure? 4.       Machine identities now outnumber humans 109 to 1, and most organisations lack credential revocation for AI agents. How prepared is the typical SEA enterprise to cut access when an agent goes rogue? 5.       How do you deploy agentic AI when you cannot guarantee shadow tools are not pulling from stale or ungoverned sources? 6.       How confident are you that a shadow AI inventory built for one market survives an audit across SEA? 7.       Singapore’s PDPC is proposing that agent memory be classified as a personal data repository. When an agent retains personal data across sessions, how do you ensure deletion actually propagates through opaque vendor systems? 8.       ASEAN’s Digital Economy Framework Agreement is set for signing in November 2026, with AI governance provisions included. How should SEA CIOs position shadow AI as a regional compliance issue—not just an internal IT problem?

    PodChats for FutureCIO: Not getting fired because of ungoverned AI agents

  3. Sep 27

    PodChats for FutureCISO: Accountability without control – a CISO’s sovereignty dilemma

    Asia’s 2027 security landscape is defined by a “governance over hype” reckoning. IDC projects regional security spending will hit US$39.5 billion in 2026, while noting only 7% of APeJ enterprises feel highly prepared in GRC skills.  As Gartner forecasts 40% of enterprises will demote AI agents by 2027 due to governance gaps surfacing only in production, CISOs face a dual mandate: deploy agents at machine speed while proving verifiable, auditable control to fragmented regulators.  Fastly CISO Marshall Erwin joins us on this episode of PodChats for FutureCISO to tackle the pressing issue of managing accountability in the age of AI as viewed from the perspective of the CISO. 1.       High level view of Fastly. 2.       Do enterprises in Asia have a comprehensive, real-time inventory of all AI agent identities and their permitted data access? 3.       From a CISO perspective, are current threat models updated to include agents as active actors, not just tools? 4.       How are enterprises demonstrating to regulators across multiple jurisdictions that their AI guardrails and data flows are governed with verifiable, auditable evidence, moving beyond policy to operational proof? 5.       Have enterprises mapped every sector-specific data localisation requirement (beyond the general PDP laws) that applies to business in Asia? (global context) 6.       Are current public and private cloud architectures designed for the necessary data residency and portability? 7.       In your view is zero-trust architecture sufficiently mature to act as the control plane for AI, effectively preventing a compromised agent or partner from causing a cascading regional incident by eliminating lateral movement? 8.       How are enterprises operationalising digital sovereignty, ensuring that our reliance on global cloud providers does not compromise our technical and operational control, especially in the event of a geopolitical or regulatory shift? 9.       Advise on Accountability without control – a CISO’s sovereignty dilemma

    PodChats for FutureCISO: Accountability without control – a CISO’s sovereignty dilemma

  4. Sep 26

    PodChats for FutureCISO: Why CISOs must own agentic AI identity before it owns you

    Asian enterprises are rapidly deploying agentic AI, yet resilience lags. Singapore’s new Agentic AI Framework offers crucial guidance on governance and accountability. To be clear, traditional IAM is ill-equipped for non-human identities, which according to some statistics outnumber humans 1:144. Organisations must prepare by establishing robust identity controls and governance, as regulators demand proof of responsible AI use within their business ecosystem. In this PodChats for FutureCISO, Jasie Fon, regional vice president of Asia, Ping Identity, offers her perspective on the state of resilience as non-human identities expand their presence and influence in the workflow.  CONSIDER RE-ORDERING 1.       Why are identity governance gaps widening as agentic AI adoption accelerates?  2.       What can enterprises across Asia learn from Singapore’s early exploration of identities for AI agents?  3.       What should enterprises put in place before giving AI agents access to systems, data, and applications?  4.       How should organisations across Asia verify an AI agent’s identity and authority?  5.       Who should be accountable when an AI agent makes a decision or takes an unauthorised action?  6.       How should CIOs and CISOs in Asia prepare for AI agents becoming part of the enterprise workforce?  7.       What role does resilience play in the age of autonomous AI agents?  8.       There are many solutions out there, what should CISOs and CIOs ask when identifying the right approach and solution for their organisation?

    PodChats for FutureCISO: Why CISOs must own agentic AI identity before it owns you

  5. Sep 23

    PodChats for FutureCISO: Strategies to mitigate trust as an attack vector

    Asian enterprises remain prime cyberattack targets, with adversaries increasingly bypassing traditional defences through sophisticated delivery models. From AI-generated phishing to software supply chain poisoning, attackers exploit trusted channels and legitimate services to infiltrate networks. These novel approaches demand a fundamental security strategy shift toward containment and resilience rather than prevention alone. In this PodChats for FutureCISO, Raghu Nandakumara, Vice President of Industry strategy, Illumio, talks about strategies CISOs and security practitioners will want to consider mitigating trust should it be used as an attack vector. 1.       How should AI governance evolve to address both the risks of using AI tools and the risks of attackers exploiting AI interest? 2.       How would you assess current user training and AI-themed social engineering? 3.       What are the SOC implications of attackers increasingly targeting the software acquisition workflow? 4.       Strategies to mitigate trust as an attack vector How should enterprises rethink "trust" in software supply chains when legitimate update mechanisms are being compromised? 5.       With AI enabling personalised phishing at machine speed, what role should behavioural controls and containment play where human detection inevitably fails? 6.       How do enterprises defend against a campaign where the malware is old and the delivery method is new? 7.       For Asian organisations where unsanctioned AI adoption is widespread, how can security teams govern what they cannot see? 8.       Does this represent a broader shift in attack patterns that should influence 2027 security investment priorities? 9.       2027 is just around the corner, what is your advice for CISOs as they set in place strategies to mitigate trust as an attack vector, including investment priorities.

    PodChats for FutureCISO: Strategies to mitigate trust as an attack vector

  6. Sep 12

    PodChats for FutureCIO: How CIOs are embedding sustainability into AI infrastructure

    As we look toward 2026 and 2027, data centre leaders across Southeast Asia and Hong Kong stand at a critical juncture. Surging AI demand is colliding with power constraints and increasingly divergent regulatory landscapes, as seen in Singapore's high benchmarks and emerging hubs like Thailand and Johor. The challenge has shifted from merely collecting sustainability data to embedding green energy as a strategic differentiator. For CIOs, success now depends on forging partnerships to navigate these complexities, building AI-ready and resilient infrastructure while developing the skilled workforce essential for execution In this PodChats for FutureCIO, Govind Choudhary, GM of Southeast Asia and India at Digital Realty, shares his perspective on how CIOs are embedding sustainability into AI infrastructure. 1.            What is Digital Realty? 2.            How do you see data centres in Asia addressing the growing gap between sustainability data collection and meaningful action? 3.            How should CIOs, in partnership with data centre operators, navigate the diverging regulatory landscapes across the region? 4.            Given the accelerating use of AI, how should CIOs design and build the right infrastructure for AI workloads while maintaining sustainability? 5.            Do should CIOs, again working with DC operators, address the skilled workforce requirements to execute this strategy? 6.            How should CIOs manage sovereign data requirements while leveraging regional scale? 7.            Any recommendation on how to build resiliency against power constraints and grid instability? 8.            How should CIOs embed sustainability as a competitive differentiator, not just a compliance cost? 9.            Not all DC operators are equal, what is your advice when selecting their operator/partner to address calls for embedding sustainability not just in their AI infrastructure but across all their compute needs – local and international?

    PodChats for FutureCIO: How CIOs are embedding sustainability into AI infrastructure

  7. Sep 11

    PodChats for FutureCIO: Escape the chaos gap to achieve AI-powered business reinvention

    Singapore's AI maturity has rebounded, but a critical execution gap threatens to undermine record investments.  While agentic AI adoption has doubled to 51% in 2026, only 10% have redesigned end-to-end workflows. This "Pacesetter" minority achieves significantly higher ROI, highlighting the difference between buying AI and building an enterprise around it—a lesson for Southeast Asia. In this PodChats for FutureCIO, Colin Tan, country manager for ServiceNow Singapore, explains to us what the most recent ServiceNow study reveals about agentic AI adoption in Singapore. Colin, welcome to PodChats for FutureCIO. 1.       Strategy & Ambition: In the ServiceNow study, 68% of organisations cited inadequate data accuracy, access, and management as on-going challenges. How do we modernise our data architecture to provide the clean, connected, and real-time intelligence AI agents need to act reliably at scale? 2.       Infrastructure & Scale: As agentic AI generates exponentially more network traffic and computational demand, is our current infrastructure resilient enough to handle this surge, or are we risking a "digital congestion collapse" that undermines performance and agility? 3.       Workflow Orchestration: While 51% of Singapore enterprises now use agentic AI, only 10% have redesigned end-to-end workflows. How do we shift from automating isolated tasks to orchestrating autonomous, cross-functional workflows that deliver measurable business transformation? 4.       Taming "Agent Sprawl": As autonomous agents proliferate across departments, they risk creating new technical debt and fragmentation. How do we architect a unified control plane to gain visibility, manage permissions, and prevent chaotic, disconnected agent deployments? 5.       Governance & Risk: Governance is the prerequisite for autonomous AI. How do we build a living governance framework that provides continuous oversight, embeds trust and transparency, and ensures accountability before agents operate at scale? 6.       Singapore’s IMDA published the world's first governance framework for agentic AI. How are Singapore enterprises keeping pace with the standard the government has set for the country? 7.       Measuring New Value: As AI shifts from efficiency to revenue creation and new business models, how should we evolve our metrics to accurately capture the value of AI-enabled agility, innovation, and competitive differentiation—not just cost savings? 8.       Lesson from Pacesetters: The ServiceNow study shows that a "Pacesetter" minority, who redesign work around AI, can achieve significantly higher ROI than those that simply layer AI onto existing processes. What can we learn from Pacesetters?

    PodChats for FutureCIO: Escape the chaos gap to achieve AI-powered business reinvention

  8. Sep 10

    PodChats for FutureCISO: From secure login to secure presence in video for CISOs

    Even as Singapore strengthens its national digital identity with device-bound passkeys to secure the login, the live video session remains a gaping exposure layer. Once authenticated, high-value activities—remote approvals, KYC reviews, and workforce verification—are conducted over mainstream video platforms that rely on trust and manual checks.  This is dangerously insufficient as deepfake video injection attacks become more capable and affordable. The question for CISOs is no longer just “who logs in,” but “who is actually present in the frame.” In this PodChats for FutureCISO, Dominic Forrest, chief technology officer at iProov, highlights these trends and solutions to mitigate against the inherent security risks that come with live video sessions. 1.       How would you define the current state of identity and session security in Southeast Asia and Hong Kong, given the rapid digital adoption and escalating AI-driven threats? 2.       Device-bound passkeys effectively secure the login session against phishing. However, once a user is “inside” a live video session, what new exposures emerge that passkeys simply cannot address? 3.       With remote workforce verification and high-value approvals now routine over video, what gaps remain in current manual verification processes? Why are these gaps particularly concerning for CISOs? 4.       How do injection attacks work, and why are they so difficult to detect with traditional verification methods? 5.       How are attackers evolving their techniques, and what makes these attacks especially dangerous for banks and fintechs? 6.       Traditional liveness detection—such as blink checks and smile prompts—is failing against modern AI-generated deepfakes. What newer technologies are emerging to verify genuine human presence in real time during live video interactions? 7.       How can continuous presence assurance at the video layer complement device-bound passkeys and national digital identity schemes, help CISOs build a more layered and resilient defence? 8.       Finally, how are regulators in the region responding to these threats, and what should CISOs be prioritizing on their roadmaps to stay ahead?

    PodChats for FutureCISO: From secure login to secure presence in video for CISOs
See All (514)

About

CXOCIETY (read "society") is the platform for senior business, technology, finance and operations executives to discuss, share and discover the latest in technology, process and people innovation."CXOInsights" by CXOCIETY is the repository of shared insights and experiences by the best, brightest and most experienced professionals globally. Subscribe to "CXOInsights" by CXOCIETY to keep abreast in the latest in all things innovation.

Information

  • Creator
    CXOCIETY | FutureCIO FutureCFO FutureIoT
  • Years Active
    2021 - 2026
  • Episodes
    514
  • Rating
    Clean
  • Copyright
    © 2026 CXOInsights by CXOCIETY
  • Show Website
    CXOInsights by CXOCIETY