Cyber & AI Perspectives — Insights on Cybersecurity and AI Governance

Dejan Kosutic explains a common bias in cybersecurity: focusing on implementing controls but not managing them. Using backups as an example, he outlines why effective security requires planning (e.g., setting objectives like RPO and backup frequency), monitoring to ensure controls work in production, internal audits to verify tasks are performed, continual improvement to prevent recurring issues, and management review to escalate unresolved problems, funding needs, or rule changes. He notes these elements reflect security management practices described in ISO standards such as ISO 27001 and ISO 42001, which he argues help organizations understand how to manage security beyond implementation. He adds that security management will become increasingly important due to regulations like NIS2 and DORA, rising cybersecurity complexity, and incidents caused by overlooked details or trends.

LINK FROM THE VIDEO
► What is an Information Security Management System (ISMS)? https://advisera.com/27001academy/blog/2016/05/23/information-security-management-system-isms-according-iso-27001/
  • (00:00) - The Missing Half of Cybersecurity: Security Management
  • (00:14) - Cybersecurity implementation vs management
  • (02:02) - The missing piece: Security management
  • (02:43) - The rising importance of security management
  • (03:27) - Further reading

Creators and Guests

DK
Host
Dejan Kosutic
CEO at Advisera & Cybersecurity and AI governance expert

What is Cyber & AI Perspectives — Insights on Cybersecurity and AI Governance?

Cyber & AI Perspectives is a podcast for cybersecurity and AI governance professionals, covering the most important trends, risks, and strategic developments shaping organizations today.

Hosted by Dejan Kosutic, one of the leading experts in cybersecurity and AI governance, each episode delivers deep insights and independent analysis you are unlikely to hear elsewhere — helping you understand what matters now and what is coming next.

To provide feedback or suggest topics for future episodes, contact us at: podcast@advisera.com