Who Owns Your AI Security Policy? with Chris Cochran

About this episode

Ron Eddings and Chris Cochran discuss the importance of AI security policies and the SANS AI Security Maturity Model.

Right now, someone in your organization is probably feeding sensitive data into an AI system that nobody approved. So when something goes wrong, who's responsible? And more critically, do you even have a policy in place to answer that question? Ron Eddings sits down with his Hacker Valley co-founder, Chris Cochran, now serving as SANS Field CISO and VP of AI Security, to talk about his freshly released SANS AI Security Maturity Model, a practical framework built for security leaders who need to stop philosophizing and start making decisions. They cover the three pillars of AI security maturity: utilizing AI for defense, protecting AI itself, and governing it across the organization. Chris then gets real about where most enterprises actually stand (hint: not as far along as they think). Listen for a conversation that meets you wherever you are: skeptic, early adopter, or somewhere in between. Impactful Moments 00:00 - Introduction 03:00 - Chris Cochran: from Co-Founder to SANS Field CISO 04:20 - Your board is pushing AI before security is ready 06:00 - Tiers of AI uses: summarization to full automation 07:50 - When AI shouldn't make the final call 10:10 - Bite-sized AI: starting…

People in this episode

Host: Ron Eddings

Guest: Chris Cochran

Topics covered

• AI security
• data governance
• security policy
• AI maturity model
• enterprise risk
• technology adoption

Keywords

• AI security
• data protection
• SANS AI Security Maturity Model
• enterprise AI
• security leaders

Mentioned in this episode

Organizations: SANS, Hacker Valley Media

More episodes of Hacker Valley Studio

• Fighting Smarter: What Combat Sports Teaches Us About Cyber Defense with Robin Black · June 9, 2026 · 25 min
• Is Vibe Coding Breaking the Internet? with Tanya Janca · June 2, 2026 · 36 min
• Why Smart People Fall for Deepfakes with Perry Carpenter · May 26, 2026 · 36 min
• Turning 30,000 Findings Into 50 That Matter with Dan Pagel and Brad Hibbert · May 1, 2026 · 35 min
• Killing the Playbook with Agentic AI with Allan Alford and Tom Findling · April 24, 2026 · 39 min
• The Epidemic of Sameness Is Killing Your Brand with Don Jeter · April 17, 2026 · 35 min