Episode summary
Battlefield to Boardroom: Assessing Cyber War Frontlines - Jen Easterly on the New Era of Cyber Risk
Money Maze Podcast
· · Guests: Jen Easterly
Summary
Jen Easterly argues that cyber risk has become a core business and national-security issue because the private sector owns most critical infrastructure and sits on the front lines of conflict. She says AI will be the most powerful technology of our lifetime, with major upside for detecting attacks early and even repairing insecure software, but also new risks as criminals use it for hyperpersonalized phishing and other scams.
She describes her path from West Point and the NSA to Morgan Stanley and CISA, using examples from Iraq, SolarWinds, and the post-Ukraine “Shields Up” effort to show why collaboration between government, tech firms, and boards matters. Her central message is that resilience matters more than trying to prevent every disruption: organizations should assume attacks, outages, and geopolitical shocks will happen, then build systems, exercises, and governance around recovery.
Easterly is blunt that software quality is the root problem behind much cybercrime, not just hacking skill. She also says boards must stop treating cyber as a cost center or compliance issue and instead manage it as strategic risk, with accountability at CEO and board level.
Key takeaways
- Jen Easterly says AI can both strengthen cyber defense and amplify phishing, so security must be built into AI systems from the start.
- She argues the private sector is the real front line because it owns and operates most critical infrastructure.
- Easterly says cybercrime could cost the world over 10 trillion dollars this year and compares it to the third-largest economy.
- She says boards that treat cyber as a cost center are complacent and should manage it as a strategic governance issue.
- Her core advice to CEOs is to assume disruption and build for resilience rather than trying to prevent every failure.
Notable quotes
“AI will be the most powerful technology of our lifetime. It will change everything. How we live, how we work, certainly how we defend our digital world”
“the private sector more than any entity is on the front lines of those battles and frankly it's why it is absolutely so critical”
“we don't actually have a cyber security problem in the world. We have a software quality problem”
“The average data breach costs over $5 million and global cyber crime damages are expected to cost the world over 10 trillion dollars just this year”
“You actually need to assume disruption and build for resilience”
How the episode opens
I am a huge believer in the power of AI to make a very positive difference in the world. And I think we have to stipulate look AI will be the most powerful technology of our lifetime. It will change everything.
How we live, how we work, certainly how we defend our digital world. AI is going to help create capabilities that can identify and detect a cyber attack before it gets near to making an impact. We talk about domains of warfare.
five domains, air, space, land, sea, and cyber space. But in the world of cyber, there really is a sixth domain. And in many ways, it's the most important domain, and that's the private sector.
The vast majority of critical infrastructure, and when I say critical infrastructure, it's not a technical term, Simon. It's water, it's power, it's healthcare, it's finance, it's transportation, it's communications, it's what drives our daily life. The vast majority is owned and operated by the private sector.
So the private sector more than any entity is on the front lines of those battles and frankly it's why it is absolutely so critical that everything that we do in cyerspace is rooted in catalyzing the right collaboration between the government and the private sector to enable us to reduce risk to that critical infrastructure. We've had some extremely distinguished guests over the last six years, but we haven't secured one who combined being a road scholar, a US Army colonel, serving two terms at the White House, a counterterrorism expert, leading the US's cyber intelligence defense agency, and one who lectures at Oxford and beyond, whilst also being hired into the private sector and working for Morgan Stanley. But today, armed with her intellect and unusually not with her trademark cowboy boots, we've secured our target and are thrilled to welcome Jen Eastly to our offices.
From the episode’s captions: roughly the first two minutes, lightly cleaned. Keep watching on YouTube →
Topics
- cyber risk
- cyber war
- cyber security
- risk management
- information security strategy
Watch the episode
Summary, takeaways and quote selection by Octagon. Quotes are short excerpts; the full conversation is in the episode.
More from Money Maze Podcast
-
Why, Where and How? CPP Investments' Heather Tobin on Building Large Hedge Fund Portfolios -
How Can We Educate Our Children Better As the World of AI Envelops Us? With Sir Anthony Seldon -
The Black Box Dilemma: Who Controls What AI Can Say? With CTGT’s Founder, Cyril Gorlla -
The Region That Defies Prediction - Simon Sebag Montefiore on The Middle East -
Fraud, Fees & Fake Degrees! Where's the Alternatives Allocation Headed? John Claisse, CEO, Albourne -
Come Fly with Me! Delta Air Lines, The World’s Biggest Airline - With CEO, Ed Bastian.
Money Maze Podcast, this episode and its artwork belong to Money Maze Podcast. Octagon is not affiliated with the show; this page is an independent summary.
