Visit Ridgeback Network Defense to learn more about how its approach to cybersecurity helps organizations think differently about resilience, risk, and defense in a rapidly changing threat environment: https://www.ridgebacknet.com On this episode of Commanding Cyber, Scott Fogarty talks with Trevor Horwitz, CISO and Founder of TrustNet, about what it really means to build a resilient organization in an increasingly automated threat environment. They explore the gap between cybersecurity compliance and actual security, why traditional assurance frameworks may struggle to account for AI-enabled attacks, and how organizations can better connect business risk with technical security decisions. Trevor also shares his perspective on risk assessment, security testing, cyber insurance, and the importance of helping business leaders understand cybersecurity well enough to make informed decisions. What We Discussed Why compliance does not equal security, and why meeting an assurance framework should be viewed as a baseline rather than the end goal.The growing challenge of AI-enabled attacks, including how automation can reduce the cost of attacks while increasing their speed, scale, and scope.Why cybersecurity decisions should begin with a business-focused risk assessment that identifies potential threat vectors and their consequences.The communication gap between technical security teams and the C-suite, and why organizations benefit from a top-down approach that translates business risk into technical requirements.How cyber insurance is evolving as insurers become more sophisticated in evaluating security practices, controls, people, processes, and technology.Why organizations need to think about cybersecurity as part of a broader interconnected ecosystem, where the compromise of one service provider can create consequences for customers and other organizations.Connect with Trevor Horwitz LinkedIn: https://www.linkedin.com/in/trevorhorwitz/ TrustNet on LinkedIn: https://www.linkedin.com/company/trustnet-inc/ TrustNet: https://trustnetinc.com About Trevor Horwitz Trevor Horwitz is the CISO and Founder of TrustNet, a cybersecurity company focused on assurance services, security testing, risk assessments, and helping organizations understand and manage their security requirements. Trevor has spent roughly three decades working across cybersecurity, consulting, and entrepreneurial ventures, serving organizations ranging from early-stage companies to large enterprises. Connect with Ridgeback Network Defense Scott Fogarty on LinkedIn: https://www.linkedin.com/in/scott-c-fogarty/Ridgeback Network Defense on LinkedIn: https://www.linkedin.com/company/ridgeback-network-defense/Website: https://www.ridgebacknet.comAbout Commanding Cyber Cybersecurity isn't just an IT problem—it's a leadership problem. Hosted by Scott Fogarty, Commanding Cyber examines the decisions, strategies, and responsibilities that shape how organizations manage cyber risk. Scott brings technical experts, business leaders, military professionals, regulators, and cybersecurity practitioners together to explore what happens when technology, leadership, compliance, and real-world threats collide. From emerging threats like AI to questions of accountability, governance, and preparedness, the show tackles the issues leaders need to understand before a crisis occurs. Because a cyberattack doesn't target a department—it targets an organization.
