RSA 2025: A Few Things Stuck With Me

Returned from RSA and, as usual, it gave me a lot to think about beyond the expo floor buzz and the flood of AI-infused everything. One thing is clear: building a defensible cyber operations program in 2025 takes more than tech and talent. Yes, we need innovation, but we also need governance. Real governance. The kind that connects strategy to execution, with operational controls that not only keep things running but also show us if they are working. AI? It is here, and it is not slowing down. But as impressive as the tools are, they do not replace good judgment. We still need people who can ask tough questions, test assumptions, and validate the outputs. That means continued upskilling. Not just learning new buzzwords but building the muscle memory to apply them. Also, this stood out: there are still ceilings to break. We have made progress on equity in cybersecurity, but there is more to do. Let's keep creating space for everyone to grow, lead, and thrive. And finally, in a world where threats are getting more complex and the stakes keep rising, I am reminded that this community, our community, is one of the strongest, most resilient out there. Grateful for the conversations, the insights, and the shared mission. Let's keep it going. *Disclaimer: The views and opinions expressed are those of the author and do not necessarily reflect the views or positions of any entities they represent.*