CISOs

The executive order on post-quantum cryptography (PQC) establishes deadlines for federal systems to transition to PQC by 2030 for key establishment and 2031 for digital signatures. It emphasizes urgency due to 'Harvest Now, Decrypt Later' attacks, where adversaries collect encrypted data for future decryption via quantum computing. CISOs must shift from awareness to structured ownership, involving cross-functional teams to address embedded cryptographic risks across enterprises.

Nordic CISOs are managing cyber threats effectively despite rising concerns, with most reporting no increase in serious cyberattacks compared to two years ago. The article highlights their resilience and ability to handle challenges without significant escalation in threats.

CISOs need to prepare for agentic AI systems by developing comprehensive AI bills of materials (BOMs) that document both component and execution attributes. This preparation is essential as AI systems become more autonomous and complex, requiring better visibility into their composition and operational characteristics.

CISOs can prepare for consuming AI Bill of Materials in five ways to influence their generation. This preparation is crucial for a modern security program. The goal is to make AI BOMs usable and effective.

The article discusses debates at RSAC 2026 about AI's role in cybersecurity, focusing on agentic applications and challenges in scaling human involvement. CISOs and industry leaders are key participants in these discussions.