See how Torq harnesses AI in your SOC to detect, prioritize, and respond to threats faster. Request a Demo.

In this episode of Security Matters, host David Puner sits down with Ariel Pisetzky, chief information officer at CyberArk, for a candid look at the fast‑evolving intersection of AI, cybersecurity, and IT innovation. As organizations race to adopt AI, the fear of missing out is driving rapid decisions—often without enough consideration for identity, security, or long‑term impact.

Sr. Technical Content Strategist From Advisory AI to Operational AI in Security Operations The early wave of AI SOC platforms has delivered mixed results. While AI proved its usefulness as a triage assistant and next-step remediation advisor, these benefits came with significant drawbacks. Foremost, the cost of outsourcing an AI SOC is significant. Medium enterprises could expect to pay anywhere from $120,000 – $360,000 a year for the service.

When vulnerability remediation succeeds at enterprise scale, it’s very rarely because the vulnerability management team is finding more vulnerabilities. It’s because the program was built around the idea of turning messy findings into steady, measurable risk reduction. That’s not an easy task. It’s easier to make it a numbers game, pointing to vulnerability volumes and how many findings were addressed, rather than accurately depicting how much real risk was eliminated.

Financial institutions operate within intense restrictions. They can face extensive regulatory scrutiny around the world. For global or multinational institutions, compliance becomes a pressing and ongoing challenge as they must align with numerous regional cybersecurity regulations, each with its own reporting and governance expectations. ‍ The Cyber Risk Institute (CRI) Cyber Profile was developed to ease this compliance overhead for security teams in the finance industry.

AI agents are about to cross a threshold. For infrastructure and security leaders, agentic AI is no longer an innovation topic but a production readiness problem. What started as sandboxed applications and tech demos at trade shows (bet you’ve seen a few of those) has morphed into long-running autonomous actors operating directly in production cloud and on-prem infrastructure. They read data, write code, deploy services, access databases, and make decisions continuously across environments.

An outdated compliance program does not just fail to reduce risk, it actively hides it.