This Week’s Pick by David B. Cross (CISO, Atlassian)
Why this discussion matters
|
Copy-paste takeaways for your team
|
Standout ideas from the episode
- Observability is the new trust model. Plans and evaluations must be visible.
- Govern both design-time and run-time. Developers and agents both need oversight.
- Multiple monitoring layers. Cognitive, tool interactions, memory, guardrails and performance all matter.
- Agents are digital workers. They need performance reviews like human employees.
Try these in the next 7 days
- Plan tracing: Enable reasoning/plan logs for one agent and review for loops or drift.
- Identity audit: Validate that every model invocation runs under a verifiable identity.
- Model routing pilot: Use small models for simple tasks and evaluate cost savings.
- Tool interaction telemetry: Log what external actions were taken and why.
- Performance scorecard: Track success rate, cost per task and human escalations.
About David B. Cross
David B. Cross is Chief Information Security Officer at Atlassian. Before Atlassian he held senior security leadership roles at Microsoft, Google and Oracle and began his career in US Navy aviation and electronic warfare. His work focuses on building engineering centric security programs, scaling security operations and helping the next generation of practitioners build meaningful careers.
Want your pick featured next?We are building a rotating slate of member recommendations from USA, Middle East and India. If you are a CISO or security leader, submit a link and 3 bullets on why it matters for other security teams. |
How we choose
|

Comments