Cyber Focus
Cyber Focus, from the McCrary Institute, explores the people and ideas that shape and protect our digital world. Each week our host, Frank Cilluffo, speaks with the leading voices in cybersecurity, and brings to light what steps public and private organizations need to be taking to keep our country secure.
Cyber Focus
Cyber Focus at RSAC 2024: Google Cloud's Phil Venables
In this episode of Cyber Focus, host Frank Cilluffo sits down with Phil Venables, Chief Information Security Officer for Google Cloud. They discuss Venables' work co-leading the President's Council of Advisors on Science and Technology's report on cyber-physical resilience, and its key recommendations including creating a national critical infrastructure observatory. The conversation also covers Google's focus on secure-by-design and secure-by-default, the implications of AI/generative AI for cybersecurity, and the evolving role of the CISO as more of a chief risk officer.
Main Topics Covered
President’s Council of Advisors on Science and Technology Report to the President on Strategy for Cyber-Physical Resilience
Creating a national critical infrastructure observatory
Secure by design and secure by default at Google
Implications of AI/generative AI for cybersecurity defenders
Evolution of the CISO role to be more like a chief risk officer
Current cyber threat landscape and basic defenses still needed
Public-private partnership between tech companies and government
Quotes
"It's not just about security, privacy, or compliance. It's about trust and safety… The bold but responsible use of AI." - Venables on ethical AI concerns
"We have much more heavily engaged with our government partners, not just here in the US, but around the world, because we recognize our position in supporting critical infrastructures." - Venables on Google's public-private partnerships.
"[Executives] also need to make sure that there's the resources in the ranks in their organizations to get security done." - Venables on executive support for security
"...implementing strong phishing resistant multi-factor authentication, keeping systems up to date, segmenting and all the basic hygiene...when you do it, you mitigate a whole bunch of risks." - Venables on basic cyber hygiene defenses
Resources
President’s Council of Advisors on Science and Technology report on cyber-physical systems - Press Release, Executive Summary, Full Report
Google's Secure AI Framework (SAIF)
Bio
Phil Venables is the Chief Information Security Officer for Google Cloud. Prior to Google, he spent 20 years at Goldman Sachs as CISO and Chief Operational Risk Officer, establishing the firm as a cybersecurity leader. Venables co-led the President's Council report on enhancing cyber-physical resilience of critical infrastructure, recommending a national infrastructure observatory. He has co-founded multiple financial sector cybersecurity initiatives and served on boards for NIST, NYU, NSA, and others. Widely recognized for his leadership, Venables has received the RSA Conference Award, FS-ISAC Critical Infrastructure Award, and other top honors. With over 25 years of cross-disciplinary experience across finance, technology and risk management, he brings a unique perspective to Google Cloud's security efforts.