I Thought Security Was the CISO's Job. I'm the First Line of Defence.
Black October sent me to the Three Lines model, the risk framework auditors use. It says the first line of defence isn't the CISO. It's the people who run the service. I run a web platform, so that's me, and AI just made my response time the whole game.