For years, security lists focused on technology (Cloud , Mobile , Serverless ). We desperately needed a list that focused on the core problem: flawed application logic, regardless of the stack. The OWASP Top 10 Business Logic Abuse (BLA) list fills that critical, architectural gap. Why? Because exploitation often happens between technologies, not within them. We must be able to categorize and talk about these intricate logic threats in a technology-agnostic way.

Moderated by Nicole Perlroth, this session at UC Irvine’s Digital Leadership Agenda 2026 surfaces a foundational reality in cybersecurity: Most organizations lack a clear, empirical understanding of how their security is actually deployed. Our Co-founder & CEO Garrett Hamilton outlines: Why proactive security remains difficult — because accuracy depends on conversations, assumptions, and fragmented knowledge across IT and security teams.

In this Masters of Data episode, we welcome back Zoe Hawkins and Roland Palmer to discuss building better security practices through small, incremental improvements personally and professionally. We emphasize regularly auditing security policies to avoid unnecessary friction that forces workarounds, treating security as sociology rather than just technology. We cover practical approaches like habit-stacking, weekly business reviews, staying informed about threats through intentional news consumption, and developing cognitive humility with security prompts.