Uploaded August 2026 | Updated September 2026, 2 weeks ago
Interview 1: Robin Macfarlane from RRMac Associats
The Mattress Money Principle: What a 50-Year Veteran Knows About System Fragility
In this interview, Robin and Adrian discuss how technology has evolved over the past 50 years. Despite massive technological changes over the decades: the PC revolution, the Internet, smartphones, the Cloud, and now Generative AI - the majority of financial institutions still use mainframes and midrange machines. Why?
We explore the reasons why older technology persists alongside the new and the lessons retiring technologists can pass on to new generations inheriting an increasingly diverse tech landscape.
Interview 2 with Kyle Sandy from Logically
Operational Clarity as the New Customer Experience
Kyle Sandy joins Adrian to discuss how prioritizing resilience affects how organizations should plan for incident response. In the past, security teams were focused on prevention and limiting breach damage. Today, boards want to know how long it will take to recover operations.
The interview wraps up with a discussion of the right and wrong way to handle a breach and the three most important things every company must get right in order to handle an incident well.
Interview 3 with Todd Thiemann from Omdia
AI Agents and Identity Security: How Enterprises Are Rewriting the Rules
Todd joins ESW with some eye-opening survey insights on the topic of IAM for AI agents. While cybersecurity conversations about internal AI use often revolve around the SOC and security operations, Omdia surveyed identity professionals for a more holistic enterprise perspective.
Unsurprisingly, AI agent use is as diverse as enterprise business units. The surprises are around where the budget comes from for these AI projects, and how authentication is handled.
Visit securityweekly.com/esw for all the latest episodes!
Show Notes: securityweekly.com/esw-471
00:00:00 Welcome to This Week's Triple Interview Special
00:02:32 Introducing Robin Macfarlane: 50 Years in Computing
00:04:45 Understanding the Mattress Money Principle and Tech Fragility
00:08:07 Why Mainframes Endure: The Engine of Finance
00:16:15 RR Mac Associates: DevOps for Mainframes
00:22:23 Transferring Knowledge to New Tech Generations
00:25:40 The Economics of Resilience and AI Code Generation
00:30:57 Protecting Production Systems from AI Agent Failure
00:32:33 Operational Clarity as the New Customer Experience
00:37:31 From Encryption to Extortion: The Threat Landscape Shifts
00:45:28 Establishing Baselines for Effective Incident Response
00:49:29 The Critical Importance of Testing Disaster Recovery
00:55:35 Differentiating Incident Response Plans and Playbooks
00:59:10 Navigating Breaches with Cyber Insurance and Counsel
01:02:39 Key Takeaways for Handling Security Incidents Well
01:05:45 Preparing for Identity Security for AI Agents
01:06:26 Omdia's Insights on AI Agents and Identity
01:11:44 Diverse Use Cases for AI Agents Across Enterprises
01:16:06 Funding Identity Security for AI Agent Initiatives
01:25:00 Lessons from Cloud for AI Agent Adoption
01:31:55 Securing AI Agents with Evolving Credential Types
01:36:30 Upcoming Topics and Farewell from Enterprise Security Weekly
Interview 1: Robin Macfarlane from RRMac Associats
The Mattress Money Principle: What a 50-Year Veteran Knows About System Fragility
In this interview, Robin and Adrian discuss how technology has evolved over the past 50 years. Despite massive technological changes over the decades: the PC revolution, the Internet, smartphones, the Cloud, and now Generative AI - the majority of financial institutions still use mainframes and midrange machines. Why?
We explore the reasons why older technology persists alongside the new and the lessons retiring technologists can pass on to new generations inheriting an increasingly diverse tech landscape.
Interview 2 with Kyle Sandy from Logically
Operational Clarity as the New Customer Experience
Kyle Sandy joins Adrian to discuss how prioritizing resilience affects how organizations should plan for incident response. In the past, security teams were focused on prevention and limiting breach damage. Today, boards want to know how long it will take to recover operations.
The interview wraps up with a discussion of the right and wrong way to handle a breach and the three most important things every company must get right in order to handle an incident well.
Interview 3 with Todd Thiemann from Omdia
AI Agents and Identity Security: How Enterprises Are Rewriting the Rules
Todd joins ESW with some eye-opening survey insights on the topic of IAM for AI agents. While cybersecurity conversations about internal AI use often revolve around the SOC and security operations, Omdia surveyed identity professionals for a more holistic enterprise perspective.
Unsurprisingly, AI agent use is as diverse as enterprise business units. The surprises are around where the budget comes from for these AI projects, and how authentication is handled.
Visit securityweekly.com/esw for all the latest episodes!
Show Notes: securityweekly.com/esw-471
00:00:00 Welcome to This Week's Triple Interview Special
00:02:32 Introducing Robin Macfarlane: 50 Years in Computing
00:04:45 Understanding the Mattress Money Principle and Tech Fragility
00:08:07 Why Mainframes Endure: The Engine of Finance
00:16:15 RR Mac Associates: DevOps for Mainframes
00:22:23 Transferring Knowledge to New Tech Generations
00:25:40 The Economics of Resilience and AI Code Generation
00:30:57 Protecting Production Systems from AI Agent Failure
00:32:33 Operational Clarity as the New Customer Experience
00:37:31 From Encryption to Extortion: The Threat Landscape Shifts
00:45:28 Establishing Baselines for Effective Incident Response
00:49:29 The Critical Importance of Testing Disaster Recovery
00:55:35 Differentiating Incident Response Plans and Playbooks
00:59:10 Navigating Breaches with Cyber Insurance and Counsel
01:02:39 Key Takeaways for Handling Security Incidents Well
01:05:45 Preparing for Identity Security for AI Agents
01:06:26 Omdia's Insights on AI Agents and Identity
01:11:44 Diverse Use Cases for AI Agents Across Enterprises
01:16:06 Funding Identity Security for AI Agent Initiatives
01:25:00 Lessons from Cloud for AI Agent Adoption
01:31:55 Securing AI Agents with Evolving Credential Types
01:36:30 Upcoming Topics and Farewell from Enterprise Security Weekly
