KBKAST

KB grabs the mic backstage at SPHERE 2026 by Atmos for two conversations that sit on either end of the same problem: how leaders should be thinking about risk in an unstable world, and what it actually looks like when a sector has been living that instability for years.

First up, KB sits down with Chris Krebs, former Director of the U.S. Cybersecurity and Infrastructure Security Agency (CISA). They get into the CISA cuts making headlines, why old assumptions baked into risk registers no longer hold, and the five cracks Chris sees forming in the foundation of modern risk management. He also breaks down why boards need to push vendors harder on third-party risk, and why cyber has become the opening move in every modern conflict.

Then Tom Huth, Specialist in Energy Market Cyber Incident Coordination at AEMO, and Ryan McLaren, co-founder and COO of Retrospect Labs, bring it back to ground level. They unpack why the energy sector’s tight-knit supply chain has made it a genuine leader in cyber resilience, the difference between a tabletop exercise and a full functional simulation, and the trust problem nobody’s fully solved: how do you verify who’s really on the other end of the phone when your systems go down? A grounded look at what it takes to build real muscle memory before the bad day arrives.

KB is on the ground at SAP Sapphire in Orlando, where AI has officially moved beyond experimentation and into the core of enterprise decision making. In two conversations, Marielle Ehrmann (Chief Security, Compliance and Risk Officer, SAP) unpacks why AI governance has entered the boardroom as an accelerator rather than a brake, what separates responsible AI from AI theater, and why the biggest risk usually isn’t the model itself but the humans around it.

Then Martin Merz (President Sovereign Cloud, SAP) explains why sovereign cloud has surged back into the conversation, the four dimensions SAP uses to define it, and why Australia’s pragmatic regulatory approach puts it among the top countries he works with globally. A grounded look at trust, governance and what it actually takes to innovate at enterprise scale.

Keywords: AI governance, sovereign cloud, enterprise AI risk, digital sovereignty, responsible AI

Mark Jones is Co Founder of MosaicalAI and has spent more than 25 years working across cybersecurity, technology risk, governance and resilience in complex environments where decisions need to be defensible and the cost of getting it wrong is high.

His work sits at the intersection of security, business leadership and change. He helps organisations understand risk, build capability in their people, create practical operating models, and move with confidence when technology is changing faster than traditional governance can keep up.

Today, Mark’s work is focused on AI. At MosaicalAI, he helps Australian organisations rebuild how teams work for the agentic era. His view is that every team runs on three things: people, technology and data, but most teams are still operating on a model built before AI. MosaicalAI maps how a team works today, builds the agentic version beside it, then rebuilds it with them.

Mark’s approach is AI native and cybersecurity driven. He does not start with tools or generic productivity use cases. He starts with the team, the workflow, the data, the controls, the risks and the decisions that matter. The goal is practical AI capability that the organisation owns, understands and can govern.

Cybersecurity is MosaicalAI’s first proof point because it is where AI adoption gets real quickly. Cyber teams already understand risk, evidence, accountability, control and resilience. When they use AI to improve triage, reporting, exposure management, control mapping, evidence gathering and decision support, they are better placed to guide safe AI adoption across the broader business.

Mark believes AI cannot simply be bolted onto an organisation. It needs ownership, guardrails, evidence, accountability, resilience and control from day one.

He is a Certified Information Security Manager and Certified Information Systems Security Professional, combining practical executive experience with globally recognised security credentials.

Recorded at Cisco Live 2026 in Las Vegas, where 20,000 operators, engineers and executives gathered at Mandalay Bay to shape the future of networking, AI and cybersecurity. KB sits down with two Cisco security leaders on the front lines of agentic AI. Peter Bailey, SVP and GM of Cisco Security, breaks down why the security frameworks built over the last 20 years weren’t designed for machine-speed agents, and what governance actually needs to look like now. Then Amy Chang, Head of AI Threat Intelligence and Security Research, reveals how adversarial attacks are moving beyond text into images and audio in ways that are invisible to the human eye but not to your agents.

Key topics: agentic AI governance, prompt injection and jailbreaks, multimodal attack vectors, MCP security gaps, identity in AI environments, security by design, and the post-Mythos threat landscape.

KB grabs the mic backstage at SPHERE 2026 by Atmos for two conversations that couldn’t look more different on the surface, but end up pointing at the same thing: where cyber threats really come from, and who’s pushing back.

First up, KB sits down with Lieutenant General Michelle McGuinness, Australia’s National Cybersecurity Coordinator, and Steph Way, Director of the National Office of Cybersecurity. They get into what those 60 actions under Horizon 1 actually delivered, how limited use legislation is changing the way businesses talk to government after an incident, and why cyber resilience can’t just sit with the technical few — it has to be something every Australian feels some ownership of.

Then James Taliento, CEO of AFTRDRK, and Jeremy Kirk, Director of Intelligence at Okta, bring it down to ground level. Cybercrime-as-a-service has made it possible for almost anyone with a internet connection to get in the game, and the latest wave of threat actors isn’t in it for ideology or even the money. It’s the thrill, the bragging rights, and a kind of rockstar lifestyle that’s being actively sold to a younger generation. It’s a candid, practical chat about what all of that means for defenders today.