E253 How Business Leaders Can Defend Against Faster Attacks with Microsoft Ireland’s David Keddy

Today’s guest is David Keddy, National Security Officer at Microsoft Ireland. With AI changing both sides of the cybersecurity battle, David joins the AI Ireland podcast to talk about why cybersecurity has become a data problem and what that means for Irish businesses. From protecting critical operations to preparing for AI-powered security agents, David shares practical insights into strengthening defences and making informed decisions about risk, resilience and AI.

Historically, cybersecurity was viewed as a defence problem, grounded in tools and infrastructures designed to protect environments. However, as David notes, “cybersecurity is very much a data problem now.” This paradigm shift arises as businesses increasingly leverage cloud services and AI technologies, which opens new vulnerabilities and challenges in safeguarding data.

David’s role involves engaging with business leaders and technologists to understand the current cyber landscape. His work focuses on national preparedness and triaging cyber incidents, offering critical advice and solutions. A significant portion of his duties also includes sharing Microsoft’s global cybersecurity telemetry to aid Irish organisations in comprehending and mitigating cyber risks.

The dual nature of AI in cybersecurity is a focal point of this conversation. While AI empowers attackers by democratising capabilities, making it easier to perform reconnaissance and deploy attacks, it simultaneously provides defenders with sophisticated tools for threat detection and mitigation. David emphasises that “AI is democratising that in terms of giving people capability that they traditionally wouldn’t have had.”

A key hurdle in cybersecurity today is educating and preparing C-suite leaders to appreciate the tangible risks and prioritise appropriate defences. David articulates a vital starting point in this process: identifying the most critical operations of a business and understanding the vulnerabilities AI might exploit. This approach involves strategic investments in AI-driven threat detection alongside traditional defensive measures.

The future of cybersecurity lies in the development of an agentic Security Operations Center (SOC), where AI agents autonomously conduct tasks such as threat hunting and vulnerability assessments. As David points out, moving toward this model requires leaders to deliberate on the level of autonomy and control over these agents, thereby enhancing real-time defence capabilities.

David urges leaders to consider several crucial actions:

• Pinpoint the most critical operations and assess the impact of potential disruptions.
• Operate under the assumption of an ongoing breach, scrutinising vulnerabilities that AI could exploit.
• Implement fundamental security measures, including two-factor authentication, to bolster defences.

As AI continues to reshape the cybersecurity landscape, David’s insights underscore the need for a balanced approach that combines cutting-edge technology with strategic planning and robust education. By adopting these practices, organisations can better safeguard their operations against the evolving threats of the digital age.