54: Attention Is All You Secure: AI and Cybersecurity Risk Management with Alec Crawford

SummaryAlec Crawford and Anastassia discuss the intersection of AI, cybersecurity, and regulatory compliance in the context of data and digital technologies. Alec shares insights on AI risk governance, the importance of data literacy, and the evolving landscape of cybersecurity threats. They explore the role of AI in combating cybercrime, the challenges of underwriting and pricing cybersecurity risks, and the need for centralized AI governance within organizations. Alec emphasizes the importance of training and change management in AI adoption. Alec is the founder and CEO of Artificial Intelligence Risk, Inc., a platform focused on AI safety, security, and compliance for enterprises. A former Chief Risk Officer and senior risk executive at major investment firms, he now advises boards and financial institutions on how to balance the risks and rewards of AI. He writes the AI Risk Reward / STAYblog newsletter on Substack and hosts the AI Risk Reward podcast, where he explores use cases, governance challenges, and the broader societal impacts of artificial intelligence. His work lies at the intersection of sustainability, technology, and risk management, with a particular focus on securely integrating high?risk AI systems into heavily regulated sectors such as banking and wealth management.? Takeaways AI is crucial in combating cybercrime. Today, you fight AI with AI.Data literacy is essential for AI adoption.Cybersecurity insurance is evolving, but still behind. Cybersecurity insurers offer discounts to companies that use best-in-class risk management tools, as motor insurance providers did decades ago when first alarm systems emerged. Cybersecurity risk is complicated to quantify.AI governance is necessary for organizational safety.Training and change management are key to the success of AI projects. Regarding the 95 percent of failed AI pilots, the issue is a lack of change-management skills and processes, not the technologies.Cybercriminals are iterating faster than defenders. Their "businesses" operate