Cybersecurity and cloud practice leadership at BDO USA. A secure platform needs to be a revenue function. CISM, C|CISO, GSLC. https://xitter.cf/t.co/2D7WxMWW3A
Colorado, USA
Joined April 2011
- Tweets16.6K
- Following403
- Followers1.5K
- Likes15.7K
In #security we have gotten very good at measuring motion. AI made the motion faster. Very few teams went back to ask whether the loop is designed right and worth running in that shape (1/4)
Attackers begin scanning for a new #CVE within 15 minutes of announcement, per @Unit42_Intel . Most patch cycles are still measured in days (at LEAST) and still start with a ticket. (3/4)
Let's explore the Japanese concept of "kaizen". You cannot improve a process you have never written down. A thread. (1/5)
In @SPGlobal 2025 survey, 42% of firms had abandoned most AI initiatives, up from 17% a year earlier, and the average org scrapped 46% of proofs of concept before production. Those firms acted. Not enough plan. Nobody wrote down the "before". (4/5)
Most improvement programs need a writing step before they need a budget. In the age of #AI - the concept of Kaizen is continuous improvement. Not blockbuster leaps of heroism but rapid AND intentional change that adds up fast. Write it down. Think process. Reap value. (5/5)
AI value isn’t about doing more. It’s about doing the right work better. @BDO_USA explores how Microsoft Copilot supports execution while keeping human judgment central. Take a closer look here: bdousa.com/4oTgpGq
An action item with no name attached is an aspiration, a wish. Get specific. X will do Y by Z date (or we will check in on Z date).
Why, in the name of all things holy, do we not yet have a GPU powered local #AI model default-shipped in every @Microsoft @Outlook install that looks at/for #phishing and #fraud signs and flags/restricts the email in a Chrome "dangerous site" kind of way?
I never thought I would be quoting a catholic perspective on the morality of AI for a hot take, but here we are. 100% agree with Pope Leo's take here. There are significant limitations of AI that we need to remember here. AI has no soul. It has only pattern recognition.
Artificial intelligences do not undergo experiences, do not possess a body, do not feel joy or pain, do not mature through relationships, and do not know from within what love, work, friendship or responsibility mean. Nor do they have a moral conscience, since they do not judge good and evil, grasp the ultimate meaning of situations, or bear responsibility for consequences. They may imitate or even simulate, but they do not understand what they produce, for they lack the affective, relational, and spiritual perspective through which human beings grow in wisdom. #MagnificaHumanitas
@Microsoft | 2024 Work Trend Index Annual Report — AI at Work Is Here. Now Comes the Hard Part | microsoft.com/en-us/worklab/…
@McKinsey | The State of AI in 2025: Agents, Innovation, and Transformation | mckinsey.com/capabilities/qu…
Your board asked you to "manage AI risk." You can't see most of it. Shadow IT took years to scale. Shadow AI scales in months. Your governance doesn't scale with it. 55% of security teams are understaffed. You govern what you see. The question: What does your board actually see?
@ISACANews State of Cybersecurity 2025 (3,800+ CISO survey): 47% of cyber teams actively involved in AI governance; 55% of teams understaffed
@Gartner_inc Shadow IT Research: Traditional shadow IT adoption required 2-4 years; AI adoption scales in months - "Shadow IT and Unmanaged SaaS Adoption in Enterprises" gartner.com/research/topics/…
7/8
This is important enough to get it's own tweet so you can hear it in the back: If #identity recovery is weaker than login, attackers will use recovery.