The ITSPmagazine Podcast · 2026-11-01 · 2 min
Key moments - from our scoring
Substance score
19 / 100
Five dimensions, 20 points each
Lisa Ventura identifies a critical governance blind spot: AI tools have proliferated across business functions - sales, HR, finance, marketing - but organizations lack clarity on who owns their security. Pantera research shows 67% of CISOs have limited visibility into AI deployment, and none report full visibility. The root cause is structural: AI specialists prioritize accuracy and performance while security specialists focus on threats and controls, leaving risks like prompt injection and data poisoning to slip between teams. Each assumes the other is handling it. Ventura founded the AI and Cybersecurity Association specifically to bridge this professional divide and has outlined five steps to close the gap this quarter, with the first being designation of a single accountable owner for AI risk. This is essential reading for CISOs, IT leaders, and business unit heads navigating AI adoption without creating security liabilities.
Hosted by ITSPmagazine, Sean Martin, Marco Ciappelli. The show scores 58.5/100 on substance across its analysed episodes. See the full show profile.
AI tools are distributed across multiple business functions (sales, HR, finance, marketing), each with different teams, and security specialists lack visibility while AI specialists focus on performance rather than threats, leaving responsibility unclear.
According to Pantera research cited in the episode, zero percent of CISOs report full visibility; 67% have limited visibility at best.
Prompt injection and data poisoning are key risks that slip between the two professions because each team assumes the other is handling them.
Name one accountable owner for AI risk, rather than distributing responsibility across multiple teams or departments.
Our reviewer’s read on each dimension, with quotes from the episode.
This is a two-minute promotional teaser for an article, not a substantive episode. The only real data point offered is a single statistic, and the promised five-step framework is withheld entirely to drive article clicks - leaving almost no learnable content.
research from Pantera this year found that 67% of CISOs had limited visibility into how AI is used in their organization
in the article I set out five steps to close that gap this quarter
The 'no one owns AI security' framing is a real and relevant observation but has become a common talking point in the security industry; there is no contrarian angle, first-principles reasoning, or fresh structural insight offered beyond the basic gap metaphor.
risks like prompt injection and data poisoning, they'll often fall into the gap, and each team will assume that the other is handling them
On the one hand, you've got AI specialists who are focused on accuracy and performance, and then security specialists, who focus on threats and controls
Lisa Ventura holds a relevant credential as the founder of the AI and Cybersecurity Association, but this monologue format provides no opportunity to demonstrate depth of practitioner experience, and the content delivered here is surface-level.
I'm Lisa Ventura, the chief executive and founder of the AI and Cybersecurity Association
I also explain why I founded the AI and Cybersecurity association to bring these two communities together
A single attributed statistic (67% of CISOs, Pantera research) and two named threat categories (prompt injection, data poisoning) constitute the entirety of the concrete evidence; no case studies, dollar figures, timelines, or company examples are present.
research from Pantera this year found that 67% of CISOs had limited visibility into how AI is used in their organization
risks like prompt injection and data poisoning
There is no host, no interviewer, no questions, and no dialogue of any kind; this is a scripted solo promotional monologue, making meaningful evaluation of conversational craft impossible.
Thank you for listening
So have a read and let me know who owns AI Security in your organization
Computed from the transcript - who did the talking, and the words that came up most.
A sales team connects an AI assistant to the customer database. Data science checks its accuracy and legal reviews the contract. Months later, an audit finds the assistant will hand over any customer record to anyone who phrases the request the right way, and the security team is hearing about the tool for the first time. This is the story that opens an Experts Corner article by Lisa Ventura MBE FCIIS, Chief Executive and Founder of the AI and Cyber Security Association (AICSA). Her point is that nobody in it did anything wrong by the standards of their own job. The failure sat in the gap between them. The article starts with ownership. A Pentera survey of 300 US security leaders found 67% had limited visibility into how AI is used in their organisation, and none claimed full visibility. It then looks at two professions speaking different languages: AI specialists talk about accuracy and drift, security specialists about threats and controls. Prompt injection and data poisoning fall between them. From there, it turns to AI agents, which take actions rather than just answer questions, so every permission they receive becomes a possible route in for an attacker.
Transcribed and scored by The B2B Podcast Index.
Speaker A: You. Hello, I'm Lisa Ventura, the chief executive and founder of the AI and Cybersecurity Association. So my article for Experts Corner is called AI Security has no Owner, and that is the problem. So AI tools are now in almost every part of every business. Sales, hr, finance, and marketing. They'll often all use them. And when I ask organizations who's responsible for securing these tools, I often get several different answers. And that actually tells me that nobody is responsible. And, um, research from Pantera this year found that 67% of CISOs had limited visibility into how AI is used in their organization. Crucially, none of them said that they had full visibility. So the problem sits between the two professions. On the one hand, you've got AI specialists who are focused on accuracy and performance, and then security specialists, who focus on threats and controls. And so risks like prompt injection and data poisoning, they'll often fall into the gap, and each team will assume that the other is handling them. So in the article, I set out five steps to close that gap this quarter, starting with naming one accountable owner for AI Risk. I also explain why I founded the AI and Cybersecurity association to bring these two communities together. So have a read and let me know who owns AI Security in your organization. Thank you for listening.
Other episodes covering the same guests and topics, from across The B2B Podcast Index.
How to Implement AI in Your Business: From AI Use Cases to Real ROI | Dr. Markus SchmidbergerUsing AI at Work · on AI governance92 / 100
#291 Why Most AI Projects Fail to Deliver ROI Sinohe Terrero CFO and COO, EnvoyGrowCFO Show · on AI governance91 / 100
Who Owns What Your AI Does?The Pre-Read · on AI governance85 / 100
Navigating AI Risks with Trevor Horwitz from TrustNetB2B Automation Spotlight · on AI governance79 / 100
Autonomous Agents Need a Verified Identity with Rosalyn CuratoTo The Point - Cybersecurity · on Prompt injection attacks78 / 100
Why AI Agents Are a Security Wild West with David from Arcjet and Johannes from CakewalkThis Much I Know · on Prompt injection attacks77 / 100