AI Security Multipliers

Steve

AI Security Multipliers explores what happens when artificial intelligence and cybersecurity collide inside the enterprise.Hosted by Steve, a technology and cybersecurity leader with more than 30 years in IT, the show goes beyond AI hype and security headlines to focus on the decisions technology leaders actually have to make.How do you adopt AI without exposing sensitive data? Who owns AI risk? How should organizations govern AI agents and identities? And how do you put sensible controls around rapidly changing technology without making it so difficult to use that people simply find another way?Drawing on real-world experience, emerging research and conversations with technology and security leaders, AI Security Multipliers explores AI, cybersecurity, data, identity, risk and governance in practical terms.No hype. No fear. Just useful conversations about how people, technology and good governance can become security multipliers.

  1. 2d ago

    AI in 1, 5 and 10 Year - What Happens Next?

    Where will artificial intelligence be one year from now? Five years from now? Ten years from now — and what happens beyond that? Predicting technology is notoriously difficult, so this episode isn't really about prediction. It's about direction. In this episode of AI Security Multipliers, Steve looks beyond the next model release and explores how AI could reshape technology, work, cybersecurity and governance over the next decade. In the near term, AI may simply become normal — embedded into the applications and technology we already use, while AI agents increasingly move from answering questions to actually performing work. Five years from now, those agents could form a genuine digital workforce, changing jobs, management and the way organizations operate. That raises some difficult questions: What happens to entry-level work? How do people develop expertise when AI performs many of the tasks traditionally used to learn it? And what happens when managers aren't just managing people, but potentially dozens or hundreds of AI agents? By 2036, AI may no longer feel like a separate technology at all. It could simply become infrastructure — with software increasingly understanding our intent and applications disappearing behind the outcomes we're trying to achieve. And then there's the bigger question: what happens when useful intelligence itself becomes cheap and widely available? We also explore what this future could mean for cybersecurity, identity, autonomous systems, Zero Trust, AI governance, AGI and the relationship between human and machine intelligence. The goal isn't to correctly predict 2036. It's to build organizations capable of adapting when we get there. Topics include: future of AI, artificial intelligence, AI agents, agentic AI, enterprise AI, AI jobs, future of work, AI workforce, AI cybersecurity, AI governance, AGI, digital workers, autonomous AI, identity security, Zero Trust and the future of technology. Send us Fan Mail

  2. Oct 7

    The AI Security Tool You Already Own

    AI is creating new cybersecurity risks — and naturally, an entire industry is emerging to sell us new tools to manage them. AI security posture management. AI gateways. AI firewalls. Agent security. Runtime protection. Model security. AI governance platforms. Some of these technologies will be essential. But before adding another platform, another dashboard and another acronym to the security stack, there's a question worth asking: How much of your AI security problem can you solve with the tools you already own? In this episode of AI Security Multipliers, Steve looks beyond the AI security hype to examine how many enterprise AI risks are actually familiar cybersecurity problems wearing a very clever new interface. Excessive AI access is still an identity problem. Sensitive data being shared with AI is still a data protection problem. An overprivileged AI agent is still a privileged access problem. An insecure AI workload is still a cloud security problem. And AI generated malicious code executing on a laptop is still something endpoint security should care about. We explore how existing capabilities including IAM, MFA, privileged access management, DLP, endpoint security, cloud security, SIEM, Zero Trust and security monitoring can form much of the foundation for securing enterprise AI. There are genuinely new AI security risks that require new capabilities. But the answer shouldn't be to build an entirely separate cybersecurity stack for AI. Start with the risk. Map the controls you already have. Identify the real gaps. Then buy technology to fill those gaps. Because there's a difference between security architecture and shopping. Topics include: AI security, enterprise AI, generative AI security, agentic AI, AI agents, cybersecurity, AI governance, identity security, IAM, DLP, Zero Trust, SIEM, cloud security, endpoint security, AI security tools, security architecture and cybersecurity tool sprawl. Send us Fan Mail

  3. Oct 5

    Your New Employee Isn't Human!

    AI agents are entering the enterprise — and they aren't just answering questions anymore. They're accessing information, using applications, calling APIs, operating browsers, making decisions and increasingly taking action on our behalf. So here's a deceptively simple cybersecurity question: Who is the agent? In this episode of AI Security Multipliers, Steve explores what happens when AI agents begin behaving less like traditional software and more like a digital workforce. We look at why agentic AI creates a new identity and access management challenge, how AI agents differ from traditional service accounts and automation, and what happens when agents begin delegating work to other agents. We also explore the coming challenge of Shadow Agents, agent lifecycle management, least privilege, Zero Trust, kill switches, accountability and the uncomfortable possibility that enterprises may eventually have far more AI identities than human ones. Because securing AI agents isn't simply about controlling what information they can access. It's about understanding who they are, what they're allowed to do, who owns them — and how you stop them when something goes wrong. Your newest employee might not be human. But they still need an access review. Topics include: AI agents, agentic AI, enterprise AI, AI cybersecurity, AI governance, identity security, IAM, non-human identities, machine identities, Shadow AI, Shadow Agents, Zero Trust, least privilege, autonomous AI, AI risk management and the future of work. Send us Fan Mail

  4. Sep 24

    Microsoft Scout — Now This Is Getting Interesting

    Microsoft Scout could be one of Microsoft's most important enterprise AI announcements yet. In this special edition of AI Security Multipliers, Steve takes a closer look at Microsoft Scout — Microsoft's new always-on AI agent for work — and what it could mean for the future of enterprise AI, Microsoft 365, cybersecurity and AI governance. Unlike a traditional AI assistant or chatbot, Scout is designed to do more than answer questions. It can work across Microsoft 365, files, browsers and enterprise systems, perform multi-step tasks and increasingly take action on behalf of the user. That capability could fundamentally change how we work. It also raises some important questions. What happens when AI stops simply answering questions and starts performing work inside the enterprise? What identity should an AI agent have? What data should it be able to access? Which actions require human approval? And how do organizations govern, monitor and secure an increasingly autonomous digital workforce? Steve explores why identity, Zero Trust, information governance, Microsoft Entra, Purview and cybersecurity become even more important in an agentic AI world — and why Microsoft's existing position across identity, security, data, Microsoft 365 and the enterprise could give it a significant advantage. The AI model may not be Microsoft's biggest advantage. Microsoft's biggest advantage may be that it already lives where we work. Topics include: Microsoft Scout, Microsoft Copilot, AI agents, agentic AI, enterprise AI, autonomous AI agents, Microsoft 365, Microsoft Entra, Microsoft Purview, cybersecurity, Zero Trust, AI governance, information governance and the future of work. AI Security Multipliers explores how artificial intelligence is changing cybersecurity, governance and enterprise technology — and how organizations can use AI to multiply capability without multiplying risk. Send us Fan Mail

    Microsoft Scout — Now This Is Getting Interesting

About

AI Security Multipliers explores what happens when artificial intelligence and cybersecurity collide inside the enterprise.Hosted by Steve, a technology and cybersecurity leader with more than 30 years in IT, the show goes beyond AI hype and security headlines to focus on the decisions technology leaders actually have to make.How do you adopt AI without exposing sensitive data? Who owns AI risk? How should organizations govern AI agents and identities? And how do you put sensible controls around rapidly changing technology without making it so difficult to use that people simply find another way?Drawing on real-world experience, emerging research and conversations with technology and security leaders, AI Security Multipliers explores AI, cybersecurity, data, identity, risk and governance in practical terms.No hype. No fear. Just useful conversations about how people, technology and good governance can become security multipliers.