Share
Security Insider Conversations
Modern threats demand modern discipline
When looking at the far reaches of the current threat landscape, typically we articulate change through the by highlighting the most active threat actors, their tactics and techniques, and what role shifting technology plays. However, when applying this information to security strategy, resilience and operational maturity are the result.
In a recent Security Insider Conversation with Capgemini’s Vice President of Cloud and Infrastructure Services, Mona Ghadiri, the discussion moved quickly beyond novel techniques and into something more consequential: what it actually takes to run modern security operations at scale. Governance that produces proof, not paperwork. Security programs that reinforce good behavior instead of just flagging failures. And resilience that extends far beyond disaster recovery.
The takeaway for security leaders is straightforward: emerging technologies don’t change the fundamentals of security. They expose whether those fundamentals were strong to begin with.
Get the latest executive perspectives on the threat landscape, emerging threats, and managing cyber risks on Microsoft Security Insider.
More episodes
View all episodes
13. AI won't fix a broken SOC
22:48||Season 1, Ep. 13Security teams are being flooded with promises that AI can automate investigations, eliminate alert fatigue, and transform security operations overnight. But the reality is more complicated.In this conversation, security leader Joe Cicero from Security Risk Advisors unpacks how organizations should evaluate AI-powered security tools, where the biggest risks hide beneath the marketing, and why successful adoption depends more on people and processes than on technology alone.The biggest takeaway: AI is not a shortcut to security maturity. It amplifies whatever foundation already exists, gaps and all.3. Operationalizing security: Lessons from the Secure Future Initiative
18:51||Season 1, Ep. 3Security transformation is measured in execution, not in policies. In November 2025, Microsoft published its latest Secure Future Initiative (SFI) Progress Report, outlining measurable progress across engineering, governance, and cultural accountability.The report details 28 objectives, risk reduction efforts, and governance alignment across the company. In a recent Security Insider Conversations interview we sat down with leaders directly involved in shaping and operationalizing SFI to unpack what those numbers represent in practice.2. Secure by Design in Practice
34:58||Season 1, Ep. 2As organizations move quickly to adopt AI, security leaders are facing a familiar challenge in a new form: how to innovate at speed without increasing risk. At Microsoft Ignite, we sat down with our partners at IBM to talk candidly about what Secure by Design looks like in practice, and why it’s becoming a foundational expectation beyond its previous buzzword status.This conversation is about how organizations need to change their mindset, culture, and the real-world tradeoffs security and business leaders are navigating as AI becomes embedded across the enterprise. All of which stems from IBM’s Institute for Business value’s most recent paper Secure by design, smarter with AI.“AI doesn’t fundamentally change the fact that security is a cat-and-mouse game, but it does make that game move much faster,” said Srini Tummalapenta, co-author of the new paper and Distinguished Engineer & CTO IBM Security Services.1. The 10 Security Decisions That Matter Most in 2026
16:09||Season 1, Ep. 1Every year, the Microsoft Digital Defense Report synthesizes signals, research, and frontline experience from across Microsoft’s global security ecosystem. Like years past, Microsoft Threat Intelligence identifies several themes that security teams should make themselves aware of, and more importantly, our recommendations on how to best address them.As part of the report we sat down with Chloé Messdaghi, one of the architects behind the report, who explains not just what defenders are up against, but how leaders should respond. Below, we break down each recommendation and what it means in practice for security leaders navigating 2025.To gain more insights into the threat landscape, read the full Digital Defense Report or the CISO executive summary.