EP273 From CISA to Cloud: AI Assurance, Concentration Risk, and the New Regulatory Frontier

Guest:

• Jeanette Manfra, VP, Head of Risk and Compliance, Google Cloud

Topics:

• How does "outsourcing" security to the cloud change the intensity of the security vs. privacy struggle for a CISO?
• Does the centralization of cloud make it a bigger target for regulators, or is there a dimension we're missing?
• Does the Shared Responsibility Model actually survive contact with regulators, and how does AI complicate that boundary?
• Can AI actually automate the translation of fragmented rules into evidence, or are we just dreaming?
• How do we navigate the collision between transparency (logging everything) and privacy (recording nothing)?
• What is your one piece of practical advice for leaders helping their teams adopt AI?

Resources:

• Video version
• EP14 Making Compliance Cloud-native
• EP161 Cloud Compliance: A Lawyer - Turned Technologist! - Perspective on Navigating the Cloud
• EP258 Why Your Security Strategy Needs an Immune System, Not a Fortress with Royal Hansen
• EP126 What is Policy as Code and How Can It Help You Secure Your Cloud Environment?