Matthew RosenquistFounder & CISO Advisor, Cybersecurity Insights · CISO, Cybersecurity Strategist, & Industry Advisor

Cybersecurity in the Context of Business

15 Jul 2026 · 3 min

Watch on YouTube

2:37

In this YouTube discussion, two speakers explore how Chief Information Security Officers (CISOs) should convey cyber risk to the broader executive suite. Speaker B argues that security must be framed as business resilience, using the language of profit, mission, and customer value rather than isolated technical jargon. The conversation expands to the role of capitalism and societal progress, noting that each new technology—historically the steam engine or printing press—brings both opportunities and threats. The speakers then debate the use of artificial intelligence to discover vulnerabilities, weighing AI’s speed against concerns that AI may not be the solution to its own risks. Ultimately, they stress that effective board‑level decision‑making requires a blend of advanced technology and human judgment, positioning cyber risk as a strategic business issue rather than a siloed IT problem.

Chapters

from a CISO perspective, how should they be translating these cyber risks?
The question is, is it with the CISO? Is it with a larger set of the executive suite? And here's why. Because I think we sometimes talk about security in isolation. And what I would rather be talking about, and there was a reason why I always had risk in my title, is resilience. Because this is the language of business. And unless you're, you know, in a clandestine environment doing classified work, you don't live and breathe for the purpose of security. Now, there are plenty of companies that have wonderful security products and solutions, and that is the core of their business. But at the end of the day, they're in business the same way that you and I are. Pick your currency of choice. We're in business to make money, serve our customers, If it's a government, your mission and citizens. If it's a nonprofit, your mission. In any which way you look at it, that's what we're trying to do. And we have all kinds of altruistic efforts that go around that. I'm not saying it's evil. I'm a great capitalist. I love capitalism. I like open, free societies. Every time we've had a revolution of some sort of a new capability, the steam engine, of the printing press. Same kinds of concepts of there's new things that are going to happen more quickly. Are they going to hurt us or are they going to help us? Number one. Number two, what are the downsides to using them? And three, how can we use them for good? The same kinds of questions are being asked, and there's a debate, and I— we should talk about it, which is I've been watching this debate of The way to effectively deal with the speed that this kind of AI can identify vulnerabilities is using AI to find them. There's a whole nother camp that says, "Hmm, not sure AI is the path to fixing AI." And I'm like, "Well, I'm not sure it needs to be fixed." A, I don't know of any other technology that can move in this same way and at that speed. But the combination of utilizing the technology with the people is the kind of question that needs to be at the board table.