English
Wayne Anderson
Report

Wayne Anderson✓

@TranslateRisk

Cybersecurity and cloud practice leadership at BDO USA. A secure platform needs to be a revenue function. CISM, C|CISO, GSLC. https://t.co/2D7WxMWW3A

403 Following1.5K Followers16.6K Posts
  1. Wayne Anderson✓@TranslateRisk
    My favorite #vibecoding commit of the day... "Remove stale staleness note."
    002215
  2. Wayne Anderson✓@TranslateRisk
    In #security we have gotten very good at measuring motion. AI made the motion faster. Very few teams went back to ask whether the loop is designed right and worth running in that shape (1/4)
    112123
  3. Wayne Anderson✓@TranslateRisk
    Posts @TranslateRisk
    @Unit42_Intel Attackers begin scanning for a new #CVE within 15 minutes of announcement, per @Unit42_Intel . Most patch cycles are still measured in days (at LEAST) and still start with a ticket. (3/4)
    11177
  4. Wayne Anderson✓@TranslateRisk
    Posts @TranslateRisk
    @Unit42_Intel I wrote the other day about Kaizen. The next improvement is put redesign of the work in the hands of the people doing it. Your SOC needs assigned explicit authority and process mapping for automated containment. No license does that for you. (4/4)
    00015
  5. Wayne Anderson✓@TranslateRisk
    Let's explore the Japanese concept of "kaizen". You cannot improve a process you have never written down. A thread. (1/5)
    202345
  6. Wayne Anderson✓@TranslateRisk
    Posts @TranslateRisk
    @Toyota In @SPGlobal 2025 survey, 42% of firms had abandoned most AI initiatives, up from 17% a year earlier, and the average org scrapped 46% of proofs of concept before production. Those firms acted. Not enough plan. Nobody wrote down the "before". (4/5)
    10031
  7. Wayne Anderson✓@TranslateRisk
    Posts @TranslateRisk
    @Toyota @SPGlobal Most improvement programs need a writing step before they need a budget. In the age of #AI - the concept of Kaizen is continuous improvement. Not blockbuster leaps of heroism but rapid AND intentional change that adds up fast. Write it down. Think process. Reap value. (5/5)
    00026
  8. Wayne Anderson✓@TranslateRisk
    AI value isn’t about doing more. It’s about doing the right work better. @BDO_USA explores how Microsoft Copilot supports execution while keeping human judgment central. Take a closer look here:
    Download
    00246
  9. Wayne Anderson✓@TranslateRisk
    An action item with no name attached is an aspiration, a wish. Get specific. X will do Y by Z date (or we will check in on Z date).
    00130
  10. Wayne Anderson✓@TranslateRisk
    Why, in the name of all things holy, do we not yet have a GPU powered local #AI model default-shipped in every @Microsoft @Outlook install that looks at/for #phishing and #fraud signs and flags/restricts the email in a Chrome "dangerous site" kind of way?
    00184
  11. Wayne Anderson✓@TranslateRisk
    I never thought I would be quoting a catholic perspective on the morality of AI for a hot take, but here we are. 100% agree with Pope Leo's take here. There are significant limitations of AI that we need to remember here. AI has no soul. It has only pattern recognition.
    Pope Leo XIV @Pontifex
    Artificial intelligences do not undergo experiences, do not possess a body, do not feel joy or pain, do not mature through relationships, and do not know from within what love, work, friendship or responsibility mean. Nor do they have a moral conscience, since they do not judge good and evil, grasp the ultimate meaning of situations, or bear responsibility for consequences. They may imitate or even simulate, but they do not understand what they produce, for they lack the affective, relational, and spiritual perspective through which human beings grow in wisdom. #MagnificaHumanitas
    00037
  12. Pope Leo XIV✓@Pontifex
    Artificial intelligences do not undergo experiences, do not possess a body, do not feel joy or pain, do not mature through relationships, and do not know from within what love, work, friendship or responsibility mean. Nor do they have a moral conscience, since they do not judge good and evil, grasp the ultimate meaning of situations, or bear responsibility for consequences. They may imitate or even simulate, but they do not understand what they produce, for they lack the affective, relational, and spiritual perspective through which human beings grow in wisdom. #MagnificaHumanitas
    3.9K58.7K303K14.5M
  13. Wayne Anderson✓@TranslateRisk
    #ShadowIT took a decade to land on the board agenda. #ShadowAI arrived years ago — 78% of employees brought their own tools (per Msft). Most never asked. Does your board know what's already inside the perimeter?
    238936
  14. Wayne Anderson✓@TranslateRisk
    Posts @TranslateRisk
    @Microsoft | 2024 Work Trend Index Annual Report — AI at Work Is Here. Now Comes the Hard Part | @McKinsey | The State of AI in 2025: Agents, Innovation, and Transformation |
    00165
  15. Wayne Anderson✓@TranslateRisk
    Your board asked you to "manage AI risk." You can't see most of it. Shadow IT took years to scale. Shadow AI scales in months. Your governance doesn't scale with it. 55% of security teams are understaffed. You govern what you see. The question: What does your board actually see?
    10148
  16. Wayne Anderson✓@TranslateRisk
    Posts @TranslateRisk
    @ISACANews State of Cybersecurity 2025 (3,800+ CISO survey): 47% of cyber teams actively involved in AI governance; 55% of teams understaffed
    10029
  17. Wayne Anderson✓@TranslateRisk
    Posts @TranslateRisk
    @ISACANews @Gartner_inc Shadow IT Research: Traditional shadow IT adoption required 2-4 years; AI adoption scales in months - "Shadow IT and Unmanaged SaaS Adoption in Enterprises"
    00016
  18. Wayne Anderson✓@TranslateRisk
    1/8 If you own #retail identity, #cloud access, or detection, start now for Q4. Peak season is when identity debt gets exploited: more temp access, more vendor touchpoints, more login volume, less tolerance for friction, and less room to change controls mid-event.
    10035
  19. Wayne Anderson✓@TranslateRisk
    Posts @TranslateRisk
    7/8 This is important enough to get it's own tweet so you can hear it in the back: If #identity recovery is weaker than login, attackers will use recovery.
    10018
  20. Wayne Anderson✓@TranslateRisk
    Posts @TranslateRisk
    8/8 Reduce seasonal attack paths now: remove dormant vendor expire temp roles review service accounts with access to commerce and loyalty APIs separate help desk rights from identity admin rights test the break-glass path
    00028
  21. Show more posts