LDR520: Emerging Trends for Cyber Leaders: AI and Cloud

Overview

This section builds comprehensive AI governance leadership capability. You will move from understanding the high-stakes business case and AI technology fundamentals through mastering governance frameworks and regulatory requirements to designing practical implementation structures. The Executive Playbook then transforms framework knowledge into leadership action—teaching you to build coalitions, overcome organizational resistance, and communicate governance value to diverse stakeholders. We focus on the "Govern AI" pillar, providing the strategic foundation for Section 2's threat-focused content.

Full Lab Details

• Design governance frameworks for industry-specific compliance scenarios, mapping requirements across NIST AI RMF, EU AI Act, and ISO 42001 to organizational context
• Conduct stakeholder mapping and resistance archetype analysis, identifying blockers and allies within your organizational structure using the Executive Playbook diagnostic framework
• Develop targeted engagement strategies, communication plans, and action priorities for governance program

Full Topic Details

• The AI Security Business Case and Fundamentals
• Financial case for AI security with ROI data and insurance implications
• AI technology fundamentals for security leaders
• Shadow AI crisis and the Three-Pillar Framework: Governance, Safety, Security
• Strategic AI Governance Frameworks
• NIST AI RMF, EU AI Act, and ISO 42001: core requirements and framework selection
• Cross-framework mapping and integration strategies
• Practical Governance Structures
• CAIO role, governance committees, AI registries, and approval workflows
• Human oversight models (HITL, HOTL, HIC), monitoring, and third-party risk management
• Leading AI Security Transformation: The Executive Playbook
• Building influence and securing executive sponsorship
• Eight resistance archetypes with diagnostic and engagement strategies
• Phased execution, stakeholder communication, and measuring program value
• Regulatory Compliance: US & EU Deep Dives
• US federal policy, sector-specific regulations, and state-level AI legislation
• EU AI Act technical requirements: accuracy, robustness, cybersecurity, and conformity assessment
• Integrated compliance roadmaps across multiple frameworks
• Global Perspectives & Emerging Frontiers
• APAC, Americas, and Middle East regulatory approaches
• Agentic AI governance, vendor supply chain management, and red teaming foundations

Overview

This section transitions from Day 1's governance foundations to operational security excellence. Building on the frameworks and structures already established, you will develop hands-on capabilities across three integrated pillars: Safety and Assurance, AI System Security, and AI-Enabled Defense. Two workshops produce actionable artifacts—bias audit findings and threat models—that translate directly into work products for your organization. By section end, you will have concrete investment roadmaps and implementation priorities grounded in real threat intelligence.

Full Lab Details

• Choosing the right governance framework when organizational maturity, political dynamics, and urgency don't all point to the same answer.
• Applying coalition-building and timing principles to secure resources, weighing competing influence strategies with different organizational positioning tradeoffs.
• How global expansion forces architectural decisions about data residency and federated governance across multiple regulatory regimes.

Full Topic Details

• Safety and Assurance: Bias Detection and Mitigation
• Bias types, sources, and the business case: legal, reputational, and operational risk
• Quantitative fairness metrics and practical detection methodologies
• Human oversight failure modes: complacency, fatigue, and atrophy countermeasures
• AI System Security: OWASP LLM Top 10 and Adversarial Attacks
• Prompt injection mechanics, defense-in-depth architectures, and real-world incident analysis
• Sensitive information disclosure, supply chain vulnerabilities, and excessive agency controls
• Adversarial attack techniques: evasion, poisoning, extraction, and backdoors
• AI-Enhanced Threat Landscape
• AI-powered phishing, deepfake fraud, and automated exploitation at machine speed
• Defensive strategies and countermeasures for AI-enhanced attack vectors
• MITRE ATLAS framework application for AI-specific threat intelligence
• AI-Enabled Defense and Investment Planning
• AI-SOC capability requirements, integration patterns, and maturity roadmaps
• Risk-based investment frameworks and Three-pillar program integration

Overview

This session translates the maturity framework into leadership decisions across four domains: IAM, Infrastructure, Detection & Response, and Security Governance. Each domain progresses from strategic context through maturity assessment, capability building, case studies, and investment prioritization. Cyber42 exercises place you in the CISO role making consequential decisions under realistic organizational pressure.

Full Lab Details

• Navigate IAM privileged access and credential strategy trade-offs
• Resolve infrastructure configuration drift under organizational pressure
• Prioritize detection and response investments under resource constraints

Full Topic Details

• Cloud Security Leadership Foundation
• The leadership imperative, threat landscape, and executive accountability
• The 8-domain maturity framework and action planning methodology
• Identity and Access Management
• Segregation: blast radius reduction, multi-account strategy, and governance
• Identity: architecture decisions, authentication evolution, and lifecycle management
• Access: least privilege, privileged access, JIT/zero standing privilege, and machine identity
• Case studies: Storm-0558, Snowflake breach, Capital One
• Integrated IAM assessment, success metrics, and investment priorities
• Secure Infrastructure and Architecture
• Configuration management: CSPM, guardrails, and drift prevention
• Resource management: Infrastructure as Code and security practices
• Image management: VM and container lifecycle security
• Architecture: landing zones, zero trust, immutable infrastructure, and threat modeling
• Network controls: VPC segmentation and PaaS networking decisions
• Case studies: Football Australia, Codecov
• Detection and Response
• Log management: strategy, retention, centralization, and cost decisions
• Security intelligence: threat feeds, enrichment, and threat hunting
• Analytics: SIEM/SOAR, detection engineering, and alert fatigue management
• Incident response: cloud-specific challenges, forensics, runbooks, and simulations
• Integrated assessment and success metrics
• Security Governance
• Leadership and oversight: committee formation, stakeholders, and charter
• Cost management: attribution, tagging, budgeting, and FinOps
• Security policy: cloud-specific policies, implementation, and enforcement
• Third-party risk: vendor assessment and board-level reporting

Overview

This session extends maturity assessment to data protection, application security, security assurance, and workforce transformation. A closing SaaS module addresses operational security for the fastest-growing cloud segment. Three Cyber42 exercises continue the CISO simulation with decisions spanning encryption strategy, DevSecOps scaling, and assurance program design.

Full Lab Details

• Resolve cross-region data protection gaps under regulatory pressure
• Balance application security remediation against scale-out demands
• Prioritize security assurance when audit findings conflict with risk reality

Full Topic Details

• Data Protection
• Encryption: key management models, BYOK/HYOK decisions, and confidential computing
• Classification: discovery, protection controls, and common pitfalls
• Backup: ransomware resilience, immutable storage, and cyber recovery
• Case study: Toyota—the 8-year data exposure blind spot
• Integrated assessment and executive success metrics
• Securing Workloads and Applications
• DevSecOps: CI/CD pipeline security, supply chain threats, and SBOM
• Secrets management and IaC validation in deployment pipelines
• Protection services: API security, WAF/DDoS, CWPP, and runtime protection
• Workload assessment: security testing, threat modeling, and maturity progression
• Case studies: Codecov, 3CX, xz Utils
• Security Assurance
• Posture validation: benchmarks, automated assessment, and CSP tools
• Regulatory compliance: PCI-DSS, GDPR, and HIPAA in cloud
• Security testing: penetration testing, MITRE ATT&CK, and purple teaming
• Case studies: Oracle Legacy breach, Change Healthcare
• Integrated assessment, metrics, and investment guidance
• Workforce Transformation
• Skills gap assessment, training frameworks, and CSP learning resources
• DevSecOps culture, security operating models, and organizational alignment
• Workforce metrics and measuring security skills effectiveness
• SaaS Operational Security
• Identity, configuration management, and shadow IT governance
• Data protection, incident response, and business continuity
• Executive action framework for SaaS security programs

Overview

In section five, we explore the preparation for the next wave of cryptographic challenges by focusing on post-quantum computing. This section covers the threats, the necessity of a crypto inventory, and strategic planning for migration. It all comes together in an executive-level capstone exercise to apply your holistic security knowledge.

Full Lab Details

• Capstone: Large scale traditional enterprise is moving to the AI and cloud. Working in groups, students draft the roadmap to modernize the entire security program and present their approach to the class

Full Topic Details

• Post-Quantum (PQC) Threats
• Understanding the quantum threat
• Impact on current encryption standards
• Assessing organizational risk
• Crypto-Agility and Inventory
• Building a cryptographic inventory
• Assessing service dependencies
• Developing a crypto-agility strategy
• PQC Transition and Migration
• Planning the migration process
• Phased rollout and hybrid approaches
• Managing transition challenges
• Executive Capstone Exercise
• Applying course concepts to a scenario
• Developing an enterprise security roadmap
• Presenting strategy to "executives"