Steve Lasky

Drawing on benchmark data from IANS, Artico Search, and The CAP Group, Nick Kakolowski, Senior Director, CISO Research at IANS, shares what boards are telling researchers they need from today's CISOs, including clearer perspectives on emerging threats, AI-driven risks, governance responsibilities, and business impact.

“At one point, we had eight Waymos stuck in the neighborhood trying to figure out how to turn around,” the neighbor said. The vehicles weren't carrying passengers, making deliveries, or accomplishing much of anything, apparently. Instead, they spent their time circling, hesitating, and second-guessing themselves like a convoy of teenage drivers who had just missed the entrance to the DMV. For local families, the spectacle was more than just annoying.

Today, information often moves through highly complex chains involving APIs, cloud platforms, copilots, embeddings, indexes, and external model providers. A single AI-enabled workflow may simultaneously interact with internal repositories, third-party SaaS applications, and downstream analytics systems. Regulators and boards are increasingly asking those same questions.