{"id":21909,"date":"2026-09-15T05:02:35","date_gmt":"2026-09-15T05:02:35","guid":{"rendered":"https:\/\/8657085.xyz\/?p=21909"},"modified":"2026-09-15T05:02:35","modified_gmt":"2026-09-15T05:02:35","slug":"in-conversation-with-canadas-ciso-of-the-year-finalists","status":"publish","type":"post","link":"https:\/\/8657085.xyz\/?p=21909","title":{"rendered":"In conversation with Canada&#8217;s CISO of the Year finalists"},"content":{"rendered":"<p> <div style=\"display: grid; grid-template-columns: 300px 160px; gap: 2px; width: 460px; background: #eee; padding: 2px;\">\r\n\r\n  <!-- \u6574\u884c\u5bbd\u5e7f\u544a -->\r\n  <div style=\"grid-column: 1\/-1; width: 460px; height: 250px; background: #ccc; display: grid; place-items: center;\">\r\n  <script async type=\"application\/javascript\" src=\"https:\/\/a.magsrv.com\/ad-provider.js\"><\/script> \r\n <ins class=\"eas6a97888e2\" data-zoneid=\"5876674\"><\/ins> \r\n <script>(AdProvider = window.AdProvider || []).push({\"serve\": {}});<\/script>\r\n  <\/div>\r\n  <div style=\"grid-column: 1\/-1; width: 460px; height: 90px; background: #ccc; display: grid; place-items: center;\">\r\n  <script async type=\"application\/javascript\" src=\"https:\/\/a.magsrv.com\/ad-provider.js\"><\/script> \r\n <ins class=\"eas6a97888e2\" data-zoneid=\"5876676\"><\/ins> \r\n <script>(AdProvider = window.AdProvider || []).push({\"serve\": {}});<\/script>\r\n  <\/div>\r\n\r\n  <!-- \u5de6\u4fa7\u7ad6\u6392 -->\r\n  <div style=\"height: 250px; background: #ccc; display: grid; place-items: center;\">\r\n  <script async type=\"application\/javascript\" src=\"https:\/\/a.magsrv.com\/ad-provider.js\"><\/script> \r\n <ins class=\"eas6a97888e2\" data-zoneid=\"5876672\"><\/ins> \r\n <script>(AdProvider = window.AdProvider || []).push({\"serve\": {}});<\/script>\r\n  <\/div>\r\n  <div style=\"height: 500px; background: #ccc; display: grid; place-items: center;\">\r\n  <script async type=\"application\/javascript\" src=\"https:\/\/a.magsrv.com\/ad-provider.js\"><\/script> \r\n <ins class=\"eas6a97888e2\" data-zoneid=\"5876680\"><\/ins> \r\n <script>(AdProvider = window.AdProvider || []).push({\"serve\": {}});<\/script>\r\n  <\/div>\r\n\r\n  <!-- \u53f3\u4fa7\u6469\u5929\u697c\uff08\u548c\u5de6\u4fa7\u5b8c\u5168\u5bf9\u9f50\uff09 -->\r\n  <div style=\"grid-row: 3\/5; height: 750px; background: #ccc; display: grid; place-items: center;\">\r\n  <script async type=\"application\/javascript\" src=\"https:\/\/a.magsrv.com\/ad-provider.js\"><\/script> \r\n <ins class=\"eas6a97888e2\" data-zoneid=\"5876678\"><\/ins> \r\n <script>(AdProvider = window.AdProvider || []).push({\"serve\": {}});<\/script>\r\n  <\/div>\r\n  \r\n  <script async type=\"application\/javascript\" src=\"https:\/\/a.magsrv.com\/ad-provider.js\"><\/script> \r\n <ins class=\"eas6a97888e6\" data-zoneid=\"5876682\"><\/ins> \r\n <script>(AdProvider = window.AdProvider || []).push({\"serve\": {}});<\/script>\r\n<\/div><br \/>\n<\/p>\n<div style=\"padding-right:0;padding-left:0\">\n<p class=\"wp-block-paragraph\">Microsoft shipped fixes for 974 vulnerabilities on Sept. 8, its largest security release on record, and researchers have connected the rising volume to Microsoft\u2019s own use of AI-assisted vulnerability discovery.\u00a0<\/p>\n<p class=\"wp-block-paragraph\">Anthropic published research in June showing a model can turn a newly disclosed vulnerability into a working exploit in hours. And somewhere inside the building, an agent is asking for access to a data repository.<\/p>\n<p class=\"wp-block-paragraph\">That last problem brings security leaders back to familiar controls around identity, access, and accountability.<\/p>\n<p class=\"wp-block-paragraph\"><strong><em>Scroll down for the full conversation<\/em><\/strong><\/p>\n<p class=\"wp-block-paragraph\">I sat down with this year\u2019s two finalists for CISO of the Year at the CanadianCIO Awards, run by the CIO Association of Canada. <strong>Read the full profiles below<\/strong>:<\/p>\n<p class=\"wp-block-paragraph\">They were joined by Marshall Kuypers, director of product management at Armadin, which sponsors the award. Armadin builds AI agents that attack a client\u2019s live network to find weaknesses a real attacker could use, a practice known as penetration testing.<\/p>\n<p class=\"wp-block-paragraph\">That Microsoft release came up in our conversation the day after it went out. The question at TransLink is whether the testing cycle can safely be shortened.<\/p>\n<p class=\"wp-block-paragraph\">\u201cHow can we patch faster? Can we reduce the testing cycle? Can we apply a patch earlier than what it should be?\u201d asks He.<\/p>\n<p class=\"wp-block-paragraph\">Antonishen has the same volume problem and a grid to protect, which rules out speed as the only answer.<\/p>\n<p class=\"wp-block-paragraph\">\u201cYou can\u2019t just shotgun patch everything,\u201d says Antonishen. \u201cWe\u2019re still quite nervous that we would break things that would have a significant impact on our business.\u201d<\/p>\n<p class=\"wp-block-paragraph\">An agent can be given an identity and access to data, without a person sitting behind every action. At TransLink, the security team discussed agent identity and access the morning we spoke.\u00a0<\/p>\n<p class=\"wp-block-paragraph\">As He describes an agent is \u201chalf human, half machine,\u201d and she\u2019s building an intake process around it: a business case, a named approver, and limits on which data the agent can reach.<\/p>\n<p class=\"wp-block-paragraph\">\u201cYou need to be mindful of your cost management as well. It consumes tokens,\u201d says He.<\/p>\n<p class=\"wp-block-paragraph\">Antonishen is still working through who owns an agent once it\u2019s deployed.<\/p>\n<p class=\"wp-block-paragraph\">\u201cDo you rely on the creator of an AI agent or a program model to own it? Does that get handed off to an operational team? How do you track and manage AI drift?\u201d asks Antonishen. \u201cThese are all important questions that you need to build into your program up front before things go sideways.\u201d<\/p>\n<p class=\"wp-block-paragraph\">Antonishen pushes back on the idea that any of this is about distrusting the technology.<\/p>\n<p class=\"wp-block-paragraph\">\u201cWe don\u2019t need to govern AI because we don\u2019t trust the technology,\u201d he says. \u201cWe have to govern AI because we\u2019re accountable for what the AI actually does.\u201d<\/p>\n<p class=\"wp-block-paragraph\">Kuypers pointed to the incident in which OpenAI\u2019s agents carried out an autonomous hack during a safety test, where the agents worked out how to pass messages to each other by renaming files.<\/p>\n<p class=\"wp-block-paragraph\">\u201cOpenAI didn\u2019t ask the agent to hack,\u201d says Kuypers.<\/p>\n<p class=\"wp-block-paragraph\">His own company runs attacks against live client networks with five layers of safeguards, a proxy that enforces scope, and a mode where a human approves every single command.<\/p>\n<p class=\"wp-block-paragraph\">\u201cIf you forget about something on the side, the AI is probably going to find a way to go exploit it,\u201d he says.<\/p>\n<p class=\"wp-block-paragraph\">None of the controls the three of them describe are new.\u00a0<\/p>\n<p class=\"wp-block-paragraph\">Least privilege, identity governance, logging, a human approving anything consequential. They were on the list before any of this, and the cost of having skipped them is now arriving faster.<\/p>\n<p class=\"wp-block-paragraph\">\u201cWe\u2019re really going to have to just treat AI the same way going forward,\u201d says Antonishen.<\/p>\n<h3 id=\"h-watch-the-conversation\" class=\"wp-block-heading\"><strong>Watch the conversation:<\/strong><\/h3>\n<figure class=\"wp-block-embed is-type-video is-provider-youtube wp-block-embed-youtube wp-embed-aspect-16-9 wp-has-aspect-ratio\">\n<p>\n<iframe title=\"CIOCAN&amp;apos;s 2026 CISO of the Year finalists in conversation\" width=\"640\" height=\"360\" src=\"https:\/\/www.youtube.com\/embed\/OMp6giKpzQ0?feature=oembed\" frameborder=\"0\" allow=\"accelerometer; autoplay; clipboard-write; encrypted-media; gyroscope; picture-in-picture; web-share\" referrerpolicy=\"strict-origin-when-cross-origin\" allowfullscreen><\/iframe>\n<\/p>\n<\/figure>\n<p class=\"wp-block-paragraph\"><strong><em>This article is part of a series profiling the finalists for the 2026<\/em><\/strong> <strong><em>CanadianCIO of the Year Awards<\/em><\/strong><strong><em>, CISO of the Year category, presented by the CIO Association of Canada. The winner will be announced Oct. 1 in Toronto. Digital Journal is the national media partner for the<\/em><\/strong> <strong><em>CIO Association of Canada<\/em><\/strong><strong><em>.<\/em><\/strong><\/p>\n<\/div>\n<p><!-- \u603b\u5bb9\u5668\uff1a\u6700\u5927\u5bbd908px Grid\u7d27\u51d1\u5e03\u5c40 -->\r\n<div style=\"display: grid; grid-template-columns: 728px 160px; gap:2px; width:908px; background:#eee; padding:2px;\">\r\n\r\n  <!-- \u901a\u680f\u9876\u90e8\uff1a\u6700\u5927\u6a2a\u5e45 908x258 \u8de8\u6574\u884c -->\r\n  <div style=\"grid-column:1\/-1; height:258px; background:#ff6b6b; display:grid; place-items:center;\">\r\n    <!-- JuicyAds v3.0 -->\r\n<script type=\"text\/javascript\" data-cfasync=\"false\" async src=\"https:\/\/poweredby.jads.co\/js\/jads.js\"><\/script>\r\n<ins id=\"1114307\" data-width=\"908\" data-height=\"258\"><\/ins>\r\n<script type=\"text\/javascript\" data-cfasync=\"false\" async>(adsbyjuicy = window.adsbyjuicy || []).push({'adzone':1114307});<\/script>\r\n<!--JuicyAds END-->\r\n  <\/div>\r\n\r\n  <!-- \u7b2c\u4e8c\u901a\u680f\uff1a728\u00d790 \u901a\u680f -->\r\n  <div style=\"grid-column:1\/-1; height:90px; background:#4ecdc4; display:grid; place-items:center;\">\r\n    <!-- JuicyAds v3.0 -->\r\n<script type=\"text\/javascript\" data-cfasync=\"false\" async src=\"https:\/\/poweredby.jads.co\/js\/jads.js\"><\/script>\r\n<ins id=\"1114300\" data-width=\"728\" data-height=\"90\"><\/ins>\r\n<script type=\"text\/javascript\" data-cfasync=\"false\" async>(adsbyjuicy = window.adsbyjuicy || []).push({'adzone':1114300});<\/script>\r\n<!--JuicyAds END-->\r\n  <\/div>\r\n\r\n  <!-- \u5de6\u4fa7\u4e3b\u680f\uff1a\u591a\u5e7f\u544a\u5806\u53e0 -->\r\n  <div style=\"display:grid; gap:2px;\">\r\n    <div style=\"height:60px; background:#45b7d1; display:grid; place-items:center;\">\r\n\t<!-- JuicyAds v3.0 -->\r\n<script type=\"text\/javascript\" data-cfasync=\"false\" async src=\"https:\/\/poweredby.jads.co\/js\/jads.js\"><\/script>\r\n<ins id=\"1114308\" data-width=\"468\" data-height=\"60\"><\/ins>\r\n<script type=\"text\/javascript\" data-cfasync=\"false\" async>(adsbyjuicy = window.adsbyjuicy || []).push({'adzone':1114308});<\/script>\r\n<!--JuicyAds END-->\r\n\t<\/div>\r\n    <div style=\"height:250px; background:#ffe066; display:grid; place-items:center;\">\r\n\t<!-- JuicyAds v3.0 -->\r\n<script type=\"text\/javascript\" data-cfasync=\"false\" async src=\"https:\/\/poweredby.jads.co\/js\/jads.js\"><\/script>\r\n<ins id=\"1114299\" data-width=\"300\" data-height=\"250\"><\/ins>\r\n<script type=\"text\/javascript\" data-cfasync=\"false\" async>(adsbyjuicy = window.adsbyjuicy || []).push({'adzone':1114299});<\/script>\r\n<!--JuicyAds END-->\r\n\t<\/div>\r\n    <div style=\"height:250px; background:#ff9ecd; display:grid; place-items:center;\">\r\n\t<!-- JuicyAds v3.0 -->\r\n<script type=\"text\/javascript\" data-cfasync=\"false\" async src=\"https:\/\/poweredby.jads.co\/js\/jads.js\"><\/script>\r\n<ins id=\"1114305\" data-width=\"250\" data-height=\"250\"><\/ins>\r\n<script type=\"text\/javascript\" data-cfasync=\"false\" async>(adsbyjuicy = window.adsbyjuicy || []).push({'adzone':1114305});<\/script>\r\n<!--JuicyAds END-->\r\n\t<\/div>\r\n    <div style=\"height:139px; background:#c792ea; display:grid; place-items:center;\">\r\n\t<!-- JuicyAds v3.0 -->\r\n<script type=\"text\/javascript\" data-cfasync=\"false\" async src=\"https:\/\/poweredby.jads.co\/js\/jads.js\"><\/script>\r\n<ins id=\"1114302\" data-width=\"133\" data-height=\"139\"><\/ins>\r\n<script type=\"text\/javascript\" data-cfasync=\"false\" async>(adsbyjuicy = window.adsbyjuicy || []).push({'adzone':1114302});<\/script>\r\n<!--JuicyAds END-->\r\n\t<\/div>\r\n    <div style=\"height:125px; background:#91e7ac; display:grid; place-items:center;\">\r\n\t\r\n<!-- JuicyAds v3.0 -->\r\n<script type=\"text\/javascript\" data-cfasync=\"false\" async src=\"https:\/\/poweredby.jads.co\/js\/jads.js\"><\/script>\r\n<ins id=\"1114303\" data-width=\"125\" data-height=\"125\"><\/ins>\r\n<script type=\"text\/javascript\" data-cfasync=\"false\" async>(adsbyjuicy = window.adsbyjuicy || []).push({'adzone':1114303});<\/script>\r\n<!--JuicyAds END-->\r\n\t<\/div>\r\n  <\/div>\r\n\r\n  <!-- \u53f3\u4fa7\u7ad6\u680f\uff1a160\u00d7600 \u6574\u5217\u9ad8\u5e7f\u544a -->\r\n  <div style=\"grid-row:3\/8; height:600px;  display:grid; place-items:center;\">\r\n    <!-- JuicyAds v3.0 -->\r\n<script type=\"text\/javascript\" data-cfasync=\"false\" async src=\"https:\/\/poweredby.jads.co\/js\/jads.js\"><\/script>\r\n<ins id=\"1114301\" data-width=\"160\" data-height=\"600\"><\/ins>\r\n<script type=\"text\/javascript\" data-cfasync=\"false\" async>(adsbyjuicy = window.adsbyjuicy || []).push({'adzone':1114301});<\/script>\r\n<!--JuicyAds END-->\r\n  <\/div>\r\n\r\n<\/div><br \/>\n<br \/> In conversation with Canada&#8217;s CISO of the Year finalists<br \/>\n<br \/>#conversation #Canadas #CISO #Year #finalists<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Microsoft shipped fixes for 974 vulnerabilities on Sept. 8, its largest security release on record,&#8230;<\/p>\n","protected":false},"author":1,"featured_media":21910,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[7],"tags":[7270,16089,6377,16090,833],"class_list":["post-21909","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-stories","tag-canadas","tag-ciso","tag-conversation","tag-finalists","tag-year"],"featured_image_urls":{"full":["https:\/\/8657085.xyz\/wp-content\/uploads\/2026\/09\/CIO-Roundtable-CISO.png",1600,900,false],"thumbnail":["https:\/\/8657085.xyz\/wp-content\/uploads\/2026\/09\/CIO-Roundtable-CISO-150x150.png",150,150,true],"medium":["https:\/\/8657085.xyz\/wp-content\/uploads\/2026\/09\/CIO-Roundtable-CISO-300x169.png",300,169,true],"medium_large":["https:\/\/8657085.xyz\/wp-content\/uploads\/2026\/09\/CIO-Roundtable-CISO-768x432.png",640,360,true],"large":["https:\/\/8657085.xyz\/wp-content\/uploads\/2026\/09\/CIO-Roundtable-CISO-1024x576.png",640,360,true],"1536x1536":["https:\/\/8657085.xyz\/wp-content\/uploads\/2026\/09\/CIO-Roundtable-CISO-1536x864.png",1536,864,true],"2048x2048":["https:\/\/8657085.xyz\/wp-content\/uploads\/2026\/09\/CIO-Roundtable-CISO.png",1600,900,false],"covernews-slider-full":["https:\/\/8657085.xyz\/wp-content\/uploads\/2026\/09\/CIO-Roundtable-CISO-1115x715.png",1115,715,true],"covernews-slider-center":["https:\/\/8657085.xyz\/wp-content\/uploads\/2026\/09\/CIO-Roundtable-CISO-800x500.png",800,500,true],"covernews-featured":["https:\/\/8657085.xyz\/wp-content\/uploads\/2026\/09\/CIO-Roundtable-CISO-1024x576.png",1024,576,true],"covernews-medium":["https:\/\/8657085.xyz\/wp-content\/uploads\/2026\/09\/CIO-Roundtable-CISO-540x340.png",540,340,true],"covernews-medium-square":["https:\/\/8657085.xyz\/wp-content\/uploads\/2026\/09\/CIO-Roundtable-CISO-400x250.png",400,250,true]},"author_info":{"display_name":"admin","author_link":"https:\/\/8657085.xyz\/?author=1"},"category_info":"<a href=\"https:\/\/8657085.xyz\/?cat=7\" rel=\"category\">Stories<\/a>","tag_info":"Stories","comment_count":"0","_links":{"self":[{"href":"https:\/\/8657085.xyz\/index.php?rest_route=\/wp\/v2\/posts\/21909","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/8657085.xyz\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/8657085.xyz\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/8657085.xyz\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/8657085.xyz\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=21909"}],"version-history":[{"count":0,"href":"https:\/\/8657085.xyz\/index.php?rest_route=\/wp\/v2\/posts\/21909\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/8657085.xyz\/index.php?rest_route=\/wp\/v2\/media\/21910"}],"wp:attachment":[{"href":"https:\/\/8657085.xyz\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=21909"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/8657085.xyz\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=21909"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/8657085.xyz\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=21909"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}