This Week’s Pick by David B. Cross (CISO, Atlassian)
Why this matters to CISOs
|
Executive-ready takeaways
|
Standout ideas from the conversation
- AI has an ROI problem. Not every use case is worth the compute and operational cost.
- Agentic AI is the next identity crisis. Neither human nor service account models apply cleanly.
- Supply chain security is immature. Reachability and exploit paths matter more than inventory.
- DLP is back. AI-driven data leakage has made data protection relevant again.
- Logs are exploding. CISOs must optimize what is collected, stored and analyzed.
What CISOs can do in the next 7 days
- Audit AI access: Identify what data AI tools can currently see.
- Map agent identities: List where autonomous workflows already exist.
- Review data classification: Validate labels before expanding AI usage.
- Assess supply chain exposure: Go beyond package presence to exploitability.
- Revisit insider risk programs: Focus on signal correlation, not single indicators.
About David Cross
David Cross is Chief Information Security Officer at Atlassian, responsible for the company’s global security strategy. He has previously held senior security leadership roles across large-scale technology environments and is known for building engineering-driven security programs that scale with cloud and AI-first platforms.
Want your pick featured next?We are building a rotating slate of member recommendations from USA, Middle East and India. If you are a CISO or security leader, submit a link and 3 bullets on why it matters for other security teams. |
How we choose
|

Comments