I work at the intersection of cyber defense, AI safety, and emerging risk, where the threats are converging and the playbooks are still being written.

My career has taken me from the Marine Corps to NSA, U.S. Cyber Command, the U.S. House of Representatives, Mandiant, and Netflix. Across every role, one throughline: understanding adversaries, building high-trust teams, and translating complex problems into strategies leaders can act on.

Today, I advise organizations, governments, and research institutions on AI governance, agentic threat preparedness, and unifying safety and security into a single discipline. I contribute to global standards efforts including the EU AI Act (via OWASP AI) and lead executive education on cybersecurity and AI strategy at SANS.

If you’re navigating the future of AI risk or security strategy, let’s connect.

Chris Cochran

This room was electric.

Just wrapped my Agentic Identity talk / BoF at [un]prompted, and honestly, having some of the best minds in AI security in one room was a highlight of the conference. We didn’t keep it high-level, we went deep into the architecture of the future.

Several of the folks in the room did research that started my own journey, or are actively tackling this same challenge:
Ken Adler, John Yeoh, Toby Kohlenberg He/Him, Charles Nwatu, Rob T. Lee, and Olivia Gallucci, just to name a few.

The conversation pushed into some big questions:

• The Agent Era: What does identity look like when the “user” isn’t human but can sometimesact like one?
• Authorization: How do we solve who can do what in a generative world?
• The Infrastructure Question: Centralized platforms, blockchain experiments, or an inevitable hybrid?

The questions from the room were next-level.

Huge thanks to Gadi Evron, Sounil Yu, and the entire [un]prompted team for creating space for these conversations.

I’ll share a deeper recap (and a few emerging answers) soon.

Field CISO & VP, AI Security @ SANS | Bridging Cyber Defense and Frontier AI Risk | Ex-NSA, Netflix, Mandiant | US Marine Veteran

No alternative text description for this image

Programs like this can change a career forever.

Honored to be a small part of this amazing program.

https://lnkd.in/ghuY7wiG

Women in CyberSecurity (WiCyS) SANS Institute Foster Nethercott Mari DeGrazia Maxwell Shuftan Tyler Corcoran Kajal Shelat

Open article: Women in CyberSecurity (WiCyS) Launches AI Security Accelerator Program for Maryland Members by finance.yahoo.com

Women in CyberSecurity (WiCyS) Launches AI Security Accelerator Program for Maryland Members

Excited to be in San Francisco for the first-ever [un]prompted Conference.

It’s encouraging to see a room full of practitioners leaning into the evolving discipline of AI security, particularly around agentic systems, identity, and workforce readiness. Not long ago, this wasn’t even a defined field. That’s wild.

If you’re here and interested in thoughtful conversations about securing what’s next, including what we’re seeing globally and how the SANS Institute is supporting the community, I’d welcome the exchange.

Strong work by Gadi Evron, Sounil Yu, and the team bringing this together.

A few years ago, I was done with security. Burned out. Two decades of the same circuit, same panels, same predictions. The people closest to me knew it.

Then AI pulled me back from the dead.

I just spent a week at [un]prompted in San Francisco, and I walked away changed. Not inspired in the vague, conference-high, shallow influencer, kind of way- changed in the "I was wrong about seven things and I'm all in" kind of way.

Wrong about the sidelines. Wrong about the hype. Wrong about whether anyone else saw what was coming.

In my latest article, I break down all seven, plus standout work from folks like Nicholas Carlini at Anthropic, Heather Adkins and John "Four" Flynn at Google, Olivia Gallucci at Datadog, and Scott Behrens and Justice Cassel from Netflix security team, all building the future of AI security in real time.

I even had a bit of a surprise guest spot.

This is our Industrial Revolution, folks. And the rules are still being written.

Check out the seven things I was wrong about below.

Gadi Evron Sounil Yu Ida Vass

I'm a student of history, business, and technology. Always have been. For years, I looked back at the Industrial Revolution, at the dawn of the intern

Open article: 7 Things I Was Proven Wrong About AI Security at the [un]prompted Conference by Chris Cochran • 7 min read

7 Things I Was Proven Wrong About AI Security at the [un]prompted Conference

I’m honored to join Pentera’s AI Security Exposure Survey 2026 Webinar alongside Ryan Dorey, Director of Technical Advisors at Pentera, where we’ll unpack the real deal from the benchmark data revealing how organizations are navigating the security challenges of rapid AI adoption. 

What we’re seeing in the data is pretty straightforward, but some insights will surprise you:

Legacy controls are being stretched to cover AI-driven workflows.
Teams are being asked to secure systems they didn’t design and may not fully understand.
And in many cases, organizations don’t have a clear way to validate AI risk before an attacker does it for them.

In this session, we’re going to have a very practical conversation about that.

We’ll cover:

• How the benchmark was built and what 300 CISOs are actually saying
• Real examples of how AI security gaps become exploitable exposure
• Where adversarial testing fits in, across data, identity, and infrastructure

It’s about closing the gap between AI adoption and real-world security validation.

Join us by registering with the link in the comments.

No industry faces the complexity of AI adoption quite like healthcare. Getting it wrong is measured in revenue but more importantly, it’s measured in outcomes, in trust, and in lives.

That’s what makes the conversations happening right now so critical.

What gave me genuine optimism was seeing security teams and IT leaders speaking with one voice, not just asking “How do we protect the organization from AI threats?” but going further. 

Acknowledging that AI carries extraordinary promise and meaningful risk, and that moving forward demands intentionality above all else.
The next 12–18 months will be defining. 

Organizations that build governance frameworks, align stakeholders, and treat security as a design principle will earn lasting trust. Those that move recklessly won’t get a second chance.

I’m encouraged by an industry leaning in with both urgency and discipline. That balance is rare. It’s also exactly what this moment requires.
Thank you to SANS Institute, HIMSS, and the healthcare community for creating a space where these conversations can happen with the seriousness they deserve.

The work continues.​​​​​​​​​​​​​​​​

It was great to see the masterful Chris Wilkes work his magic in another Crisis Exercise. Amanda Burdey, GISF, GSTRT and I got to do a bit of acting in support. 

It was also a pleasant surprise to see Maria Graham. I still am and will always be jealous of your friend group. So cool to see.

#HIMSS26

Want to see how AI can automate absolutely everything in the SOC?

Then this is not the talk for you.

On March 18th, I’m joining my dear friend Nathan Burke from 7AI for a SANS Institute webcast “Don’t Trust AI – Verify It: A Practical Discussion About AI in the SOC”  and we’re not here to sugarcoat anything.

We’ll be getting into:
• Why agentic AI systems are introducing risks most orgs aren’t ready for
• What “verify, don’t trust” actually looks like in practice inside the SOC

If you’re leading security strategy in an AI-first world, this conversation is one to check out. 

No fluff, no vendor pitches just two crazy tech guys with slightly too much energy, who care deeply about getting this right. 

Get your spot in the comments below.

If you know Kate Marshall, you know she is someone who legitimately wants to give value to everyone in her atmosphere. 

This book is pure value for those looking to bring AI into their personal or professional lives.

I’m proud of Kate, not only for this masterclass of a book, but for stepping into to the arena and arriving like a force to be reckoned with.

Grab your copy here: https://a.co/d/02rpuPWV

Great to be back with our special operations community this week at SOFWERX for C2DS. We focused on the intersection of agentic security and prompt engineering, specifically how these technologies can be weaponized as tactical force multipliers for the mission.

As the threat evolves, ensuring our elite operators have a competitive edge is paramount. It was a privilege to contribute to the mission and spend time with the professionals dedicated to keeping this country safe.

Thanks for making this week awesome Kerry Rock, Luke Leviner, and Foster Nethercott. 

Semper Fi.

Last week I sat down with 300 CISOs worth of data and one question kept echoing in my head: How is it possible that 100% of enterprises have adopted AI, and zero percent have full visibility into it?

I hosted a live session last week with Ryan Dorey from Pentera, digging into their AI Security & Exposure Benchmark 2026. What came out of it was one of the most honest, unfiltered conversations I've had about where enterprise AI security actually stands right now.

A few things that stopped me cold:

→ Only 11% have purpose-built AI security tooling, the rest are stretching legacy controls to cover attack surfaces they were never designed for
→ 50% of CISOs cite lack of internal expertise as their # 1 barrier, not budget
→ Shadow AI isn't some edge case. It's the default condition in most enterprises right now

And the one that always keeps me up at night: we are in the calm before the storm.

Autonomous agents that don't sleep. Attack paths that are 80-90% automated. An 11-year-old with access to a sophisticated offensive agent isn't science fiction, my friends.

I wrote up a bit from the session, the data, the real-world attack scenario we walked through, and what I'd tell every security leader to focus on today.

Link to the full article. 👇

What's the biggest AI security challenge you're navigating right now? I'd genuinely love to hear it.

Last week I had the privilege of joining Ryan Dorey from Pentera to dig into their freshly released AI Security & Exposure Benchmark 2026 - a survey o

Open article: The 100/0 Problem: Every Enterprise Has AI. None Have Full Visibility Into It. by Chris Cochran • 6 min read

The 100/0 Problem: Every Enterprise Has AI. None Have Full Visibility Into It.

I was fortunate enough to contribute to this CSO Online piece on how CISOs are rethinking data protection in the AI era.

The core challenge I keep coming back to: AI-driven data exposure doesn't look or feel like exfiltration. Employees paste source code and customer data into consumer models, thinking they're being productive,  not realizing the risk. Add expanding data sovereignty rules, AI-specific regulatory guidance, and post-quantum encryption on the horizon, and you understand why this has become a board-level conversation.

Shoutout to the other security leaders and practitioners featured in the article by Mary K. Pratt, lots of practical thinking in here worth your time.

Link in the comments.

It was an honor to hang out with my buddy Christopher Luft to chat all things AI in security.

Thanks LimaCharlie and SANS Institute for facilitating the conversation.

AI skill gaps are a real conversation right now, and Chris Cochran, Field CISO and VP of AI Security at SANS Institute, breaks it down into three practical buckets for defenders who want to stay ahead.

Start by figuring out what you can offload to AI: summarization, enrichment, repetitive tasks. Save the deterministic decisions for humans.

Then learn how to secure AI itself:

> Agent-to-agent communications
> MCP server security
> OWASP Top 10 for agents

Finally, understand governance. Not just the technical side, but what your company is actually trying to do with AI. Security practitioners who can enable the business, not just protect it, become irreplaceable.

Listen to the full episode: https://lc.pub/4s7iL4V

#cybersecurity #ai #podcast

I’m incredibly proud of the work we’ve put into the latest OWASP AIVSS Project update. Still pinching myself about being involved with some of the most respected leaders in our industry.

OWASP AIVSS Project 
OWASP AI Exchange 
SANS Institute

The AI Exchange is proud to co-publish this magnificent OWASP AIVSS Project update. Credits to all experts and for the OWASP AI Exchange: Behnaz Karimi, Chris Cochran, Miracle Owolabi, with supporting: Alex Leung and Srajan Gupta.

#ai #aisecurity

Hi! 👋   My name is Gianna and I love bees, cybersecurity, and building things. I'm CEO & Co-Founder of the Cybersecurity Marketing Society and a marketing consultant and advisor to cybersecurity companies and tech startups. 

Recent Marketing Advisor at Votiro, a few other companies, and working on my own awesome companies: the Cybersecurity Marketing Society, a community for cybersecurity marketers to network, grow, and learn from each other!

My passions include: startups, cybersecurity, real estate, art, agtech, digital and online culture, and more!

Please include a message in your connection request but do feel free to reach out to me - I love to make connections with ambitious, passionate, and inspiring people!

Gianna Whitver

What's out there for CYBER MARKETERS at RSAC this year? 

We've got a full docket of amazing activities that will help you:
🤝  Connect & network
😎  Have a good time too!
💓  Feel appreciated

At this busiest, biggest cyber show of the year!

We know your feet hurt (ask me for a badge ribbon that says that if you see me 😉 ). We know you are losing your voice. We know that the coffee in the Moscone is $48 and bland. We know that you are managing chaos, lost booth or activation items, party management (and mis-management), being price-gouged, all while trying to find your vital teammate/boss who has fallen asleep under a very trendy hightop on a rooftop bar .85 miles away but NEEDS to make a 7:45am meeting with a journalist the next morning.

All while knowing that 

THAT'S WHY, we have a full lineup of fabulous activities for MARKETERS (and friends) at the show. Join us for any of the below (link in comments)

💃 SUNDAY - Our infamous (and fabulous) Party for Marketers at RSAC. We've added some prizes too (a Hulken bag and four bottles of Olive Hill Estates local-grown Napa Valley olive oil!)

Buffet including wagyu carving station, amazing cocktails & mocktails, a treat-STUFFING station for goodies to take with you, and all the networking and buoying you need before the big week!

Thank you ActualTech, LinkedIn, MOBI Solutions, PAN, and Tofu for sponsoring

🌲 MONDAY - #CyberCMO Meetup with the lovely CyberCMO crew including Charles Gold, Missi Carmen & Mary Yang. CMOs / Heads of Marketing welcome!

😋 TUESDAY - A marketer's [healthy!] lunch, provided by Aikido Security (thanks Madeline Lawrence & team for putting this on!). Slip away from your booth for an hour and join your peers on a local rooftop for bites, convo & sunshine!

📖 WEDNESDAY - The Cybersecurity Marketing Society Meetup Space at RSAC. We will have tables, chairs, and some Society literature/information! Stop by to pick up some info on the Cybersecurity Marketing Society! 

🍷 THURSDAY - Our Debrief & Destress in Napa Valley. Graciously hosted by Jamie Cegelski-Gaebe of Priority Experiences and Brian Allard of Olive Hill Estates, take the shuttle or meander your way to a relaxing & revitalizing experience:

• Complimentary local Napa Wine tastings
• Olive oil & sourdough bread tasting experience
• Networking & debrief session on RSAC experience with your fellow marketing, business & security leaders
• Dinner (provided) with your peers
• Relaxing and enjoying gorgeous scenery
• Complimentary CA Winepass and discount on a beautiful hotel if you continue onward into Napa for the weekend

Thanks Priority Experiences for being our partner in wine & this experience and Olive Hill Estates for sharing the beautiful venue, setting, and olive oil!

Marketers, the big week is almost here. It doesn't have to be all work.

PS: There's 1 MORE in comments

We love ya. 
Gianna, Maria Velasquez 🇲🇦, and the Cybersecurity Marketing Society crew

*Please excuse the typo, I know it's RSAC not RSA

The time has come...

...to share that yes, I will be at RSAC.

And I cannot wait to see you :) Book a meeting with me here if you want to chat Society membership, sponsorships, or just shoot the breeze: https://lnkd.in/e_3afz5v

And if you want me to stop by your booth, let me know! 😍

Today I am pleased to share a 🔥 REALLY COOL JOB 🔥 from Cybersecurity Marketing Society member company Vega!

Vega is hiring a Field Marketing Manager to lead the East region. Vega is one of the hottest cybersecurity startups at the moment, building the next-generation operating system for the SOC: an AI-native platform already deployed at some of the world's largest organizations. Vega is hiring a Field Marketing Manager in the East region to fully own their territory, aligned directly to the Regional VP of Sales.
 
At Vega, you will build quarterly territory plans from scratch and run the whole GTM playbook: executive roundtables, ABM, partner co-marketing, community alliances, and major conferences like RSA, BlackHat, Gartner and more! 
 
You own pipeline numbers, you own budget, and you have the visibility that comes with being at a well-funded company in full "go big" mode. 
 
For field marketers who want more than execution and are ready to own strategy and results, this is a serious seat at the table. 🦾 

Link in comments 😁

Replay Day for #CyberMarketingCon25 starts today at 11am ET! 

Intro & a teaser of Don Jeter's session below. 

See you there! 😃

Enjoy this compilation of the best parties and networking activities at #RSAC26!

Think your party is a contender? Drop a link on this post or send it over email and our team will review: media @ cybersecurity marketing society dot com

View company: Cybersecurity Marketing Society

RSAC 2026 is in San Francisco from March 23 to 26, and we have compiled the best networking events list you didn't know you needed.

We’ve mapped out the entire week for you.

📌📌 Highlights include:

✔️The Entertainment: Busta Rhymes with Abnormal AI and the closing ceremony with Hugh Jackman.

✔️The Experiences: Warriors vs. Nets at the Chase Center and a luxury yacht reception with EC-Council.

✔️The Classics: CYBERTACOS, CISO Karaoke, and the legendary Optiv After Party.

✔️The Wind-down: A post-con debrief in Napa Valley.

Pro Tip: RSVP ASAP! These lists fill up fast, and some (like Optiv) require physical wristbands from their booth.

Check out the full guide here: https://hubs.ly/Q0448kYL0

Join us for a fun ASK-ME-ANYTHING with cyber creator extraordinaire Phillip Wylie!

 2pm ET today! Register here: https://lnkd.in/eqPxn7BH

Join, ask about anything related to building an audience in cybersecurity, building and growing a podcast, or working with influencers!

taplio

The Battle

Chris Cochran

Gianna Whitver

Followers

Posts

Engagements

Likes

Performance ScoreChris Cochran's LinkedIn Performance

Performance ScoreGianna Whitver's LinkedIn Performance

Ready to grow your LinkedIn presence?

taplio

The Battle

Chris Cochran

Gianna Whitver

Followers

Posts

Engagements

Likes

Performance Score.css-goub6s{font-size:var(--chakra-fontSizes-md);font-weight:500;color:var(--chakra-colors-gray-600);display:block;margin-top:var(--chakra-space-1);}Chris Cochran's LinkedIn Performance

Performance ScoreGianna Whitver's LinkedIn Performance

Ready to grow your LinkedIn presence?

Performance ScoreChris Cochran's LinkedIn Performance