Uploaded December 2025 | Updated September 2026, 3 weeks ago

---

Everyone's investing in AI detection and security training.

But here's what most organizations are missing:
Operational controls.

As João Pedro Gonçalves, CISO at EQT Group, explained in our 2025 Year in Review:

"We feel like the more AI mimics a human, the more operational controls you need to have inside the organization."

The reality? AI-powered scams will eventually bypass your detection systems. Training will fail. Heuristics aren't deterministic.

What protects you when that happens?

✅ Separation of duties (no single employee can move millions)
✅ Vendor callbacks for verification
✅ Four-eyes principle on critical transactions
✅ Classical operational controls that don't rely on detection

AI isn't making these fundamentals obsolete. It's making them more critical than ever.

Hear the full conversation in our 2025 compilation episode featuring insights from 12 leading CISOs.

👉 Spotify: open.spotify.com/episode/3oT4iuRJDyrCeBClmnn1Bv
👉 Apple Podcasts: podcasts.apple.com/us/podcast/cybersecurity-predictions-2026-what-security-leaders/id1798438916?i=1000741481547
👉 YouTube: youtu.be/cWtNJq3C2Zc