Sunlight on Shadow AI: When Security Learns to Tinker—Rob T. Lee from the SANS Institute on AI Risk

About this episode

Rob T. Lee discusses the challenges of AI risk management and the concept of shadow AI in organizational security.

Most security playbooks weren’t built for an era where AI moves faster than policy. Rob T. Lee says the default answer of “no” is creating a far bigger problem: shadow AI — widespread, unsanctioned usage that quietly exposes organizations to risk. Rob T. Lee — Chief of Research & Chief AI Officer at the SANS Institute — joins Wade to unpack pragmatic ways leaders can move forward without breaking things. From the “tinker/hacker” mindset that helps teams learn, to treating security like a lifeguard (not a chokehold), Rob lays out the short, repeatable moves that actually get enterprises experimenting safely: enable small experiments, create accountability partners (not mythical “AI champions”), red-team your integrations, and make governance part of the daily routine. In this episode you’ll hear: Why a blanket “no” to AI creates shadow AI and greater risk. How to flip policy toward a cautious “yes” and act like a lifeguard, not a jailer. Practical training tactics: 30 minutes a day, micro-projects, and hackathons. What good AI governance looks like — rules of acceptable use, vendor checks, red teams, and regulatory thinking. Why executives and boards need to be hands-on…

People in this episode

Host: Wade Foster

Guest: Rob T. Lee

Topics covered

• AI risk
• shadow AI
• security policy
• governance
• experimentation
• leadership

Keywords

• AI
• shadow AI
• security
• governance
• experimentation
• SANS Institute
• leadership
• policy

Mentioned in this episode

Organizations: SANS Institute

More episodes of Agents of Scale

• Lovable's Ryan Meadows on the New GTM Playbook · June 11, 2026 · 43 min
• Eric Ries on Vibe Coding and Building Incorruptible Companies · June 1, 2026 · 57 min
• Guru's Rick Nucci on Building AI Your Team Can Trust · May 21, 2026 · 47 min
• How Wistia started shipping nearly 10x feature releases per year · March 19, 2026 · 38 min
• Why "Get With the Program" Doesn't Work—Claire Vo on AI That Actually Sticks · March 12, 2026 · 51 min
• A Very Different CFO: How Carlos Olea Launched AI Transformation at Howard Hughes · March 5, 2026 · 37 min