Show notes
In 2025, AI and automation are reshaping Asia’s cybersecurity landscape, empowering both defenders and adversaries. CISOs face intelligent, self-evolving threats—from AI-generated deepfakes to autonomous malware—exploiting the region’s rapid digitalisation and IT/OT convergence. While AI-driven SOAR and predictive analytics enhance response, over-reliance risks blind spots, especially with regionally biased data. Regulatory shifts in Japan, Singapore, India and beyond demand accountability in AI use, placing CISOs at the nexus of compliance and innovation. The rise of cross-border, AI-powered attacks underscores the need for resilient, adaptive security strategies. CISOs must balance automation with human oversight, secure generative AI platforms, and strengthen supply chain defences. Success hinges on anticipating threats, ensuring ethical AI deployment, and upskilling teams to operate effectively in an era of intelligent cyber conflict. The challenge is not just technical—but strategic, regional, and human.In this PodChats for FutureCISO, Kylie Watson, head of security at DXC Technology, shares her views on AI, automation and the next generation of threats.1. Our topic is AI, automation and the next generation of threats. Please describe for us the relationship between all three as viewed from the perspective of a security professional.2. How can CISOs ensure the integrity and security of third-party AI models integrated into their core business systems?3. In your view, are incident response playbooks used by enterprises in Asia resilient enough to handle AI-powered, self-evolving malware?4. What safeguards are in place to detect and prevent deepfake-driven social engineering attacks targeting regional executives?5. How can enterprises maintain compliance with emerging AI governance regulations across multiple Asian jurisdictions?6. To what extent are organisations auditing training data for bias, leakage, or adversarial manipulation in our automated systems?7. Can current detection tools distinguish between legitimate automation and malicious AI-driven lateral movement?8. How are enterprises preparing for supply chain attacks that exploit vulnerabilities in open-source AI frameworks?9. Are security teams equipped with the skills to monitor, interpret, and challenge AI-driven security decisions?10. How can enterprises build adaptive, intelligence-led defences that evolve in tandem with next-generation threats? What is the role of the CISO here?11. Coming into 2026, how should CISOs and the security team prepare for the further deepening of the integration of AI into the organisational workflow?