AI news ·
Zero Trust in the AI Era: Insights from University of Texas CISO George Finney
George Finney, UT Systems CISO, urges evolving zero trust strategies to address AI’s implicit trust challenges. His new book offers insights on applying zero trust to AI security.
Bringing Zero Trust Into the AI Era
University of Texas CISO George Finney on Zero Trust Challenges and His New Book
George Finney, CISO at University of Texas Systems, highlights the urgent need for enterprises to advance their zero trust strategies to address how trust is inherently built into artificial intelligence. He stresses that security teams must be trained to recognize implicit trust within systems, whether in traditional tools like firewalls or emerging AI technologies.
"Maturity models help identify trust relationships in digital systems, but changing the mindset to spot implicit trust is challenging," Finney explains. His new book, Rise of the Machines: A Project Zero Trust Story, explores applying zero trust principles to AI applications, offering practical insights for security professionals.
Finney points out that AI can actively support zero trust efforts by enabling automation, especially for scaling software-defined perimeters. However, he warns that teams need to understand AI’s risks and ensure defenses align with established frameworks such as the MITRE framework and the Open Worldwide Application Security Project (OWASP).
"The main challenge is educating teams to identify where trust exists implicitly," Finney says.
In a recent interview, Finney discussed several key points:
- Why zero trust must evolve from static models to continuous, AI-aware strategies
- How MITRE Atlas and OWASP tools help detect AI-specific trust vulnerabilities
- Ways AI enables scalable access control and faster threat response
With over 20 years in cybersecurity, Finney is recognized globally, including being named one of the top 100 CISOs in 2021 by CISOs Connect. He co-authored Project Zero Trust with John Kindervag and continues shaping security approaches that address modern threats.
For IT professionals and developers looking to strengthen zero trust knowledge in the context of AI, exploring resources and training on AI security frameworks is essential. Courses and materials that cover AI risks and defenses can help teams adapt to this evolving landscape.
To learn more about AI and security training, visit Complete AI Training.