Wayne Anderson

Executive and leader protecting #data at intersection of business, people, and #innovation with BDO Digital USA. Opinions my own, not of Firm.

[Wayne Anderson @DigitalSecArch]

I never thought I would be quoting a catholic perspective on the morality of AI for a hot take, but here we are. 100% agree with Pope Leo's take here. There are significant limitations of AI that we need to remember here. AI has no soul. It has only pattern recognition.

[Pope Leo XIV @Pontifex]

Artificial intelligences do not undergo experiences, do not possess a body, do not feel joy or pain, do not mature through relationships, and do not know from within what love, work, friendship or responsibility mean. Nor do they have a moral conscience, since they do not judge good and evil, grasp the ultimate meaning of situations, or bear responsibility for consequences. They may imitate or even simulate, but they do not understand what they produce, for they lack the affective, relational, and spiritual perspective through which human beings grow in wisdom. #MagnificaHumanitas

[Wayne Anderson @DigitalSecArch]

@ryancarson More people rich off of AI stocks isnt going to offset 100,000 laid off 100k+ jobs in America on the demand side. When that trickles to restaurants and main street, it accelerates closure rates. Which then affects suppliers. AI becomes a fuse for a broad recession.

[Wayne Anderson @DigitalSecArch]

@ryancarson We aren't ready from a #publicpolicy perspective. What do you do when your educated unemployment crosses 10%? It takes a LOT of tradesmen to make up for a small number of engineering jobs lost. And meanwhile demand side starts to slide because the money is gone.

[Wayne Anderson @DigitalSecArch]

@Microsoft | 2024 Work Trend Index Annual Report — AI at Work Is Here. Now Comes the Hard Part | https://t.co/DP4x4HRNtv
@McKinsey | The State of AI in 2025: Agents, Innovation, and Transformation | https://t.co/uMkqEviO8Q

[Wayne Anderson @DigitalSecArch]

#ShadowIT took a decade to land on the board agenda. #ShadowAI arrived years ago — 78% of employees brought their own tools (per Msft). Most never asked. Does your board know what's already inside the perimeter?

[Wayne Anderson @DigitalSecArch]

@ISACANews @Gartner_inc Shadow IT Research: Traditional shadow IT adoption required 2-4 years; AI adoption scales in months - "Shadow IT and Unmanaged SaaS Adoption in Enterprises" https://t.co/xupFgIefQm

[Wayne Anderson @DigitalSecArch]

Your board asked you to "manage AI risk." You can't see most of it. Shadow IT took years to scale. Shadow AI scales in months. Your governance doesn't scale with it. 55% of security teams are understaffed. You govern what you see. The question: What does your board actually see?

[Wayne Anderson @DigitalSecArch]

@ISACANews State of Cybersecurity 2025 (3,800+ CISO survey): 47% of cyber teams actively involved in AI governance; 55% of teams understaffed

[Wayne Anderson @DigitalSecArch]

@rik22ky Yes. Without question. Any skill you don't use will atrophy. That doesn't mean you stop knowing C# or Ruby or whatever, but it may mean you get lazy or miss a step. It may mean being slower when you have to "go manual".

[Wayne Anderson @DigitalSecArch]

8/8
Reduce seasonal attack paths now:
remove dormant vendor
expire temp roles
review service accounts with access to commerce and loyalty APIs
separate help desk rights from identity admin rights
test the break-glass path

[Wayne Anderson @DigitalSecArch]

1/8
If you own #retail identity, #cloud access, or detection, start now for Q4. Peak season is when identity debt gets exploited: more temp access, more vendor touchpoints, more login volume, less tolerance for friction, and less room to change controls mid-event.

[Wayne Anderson @DigitalSecArch]

7/8
This is important enough to get it's own tweet so you can hear it in the back: If #identity recovery is weaker than login, attackers will use recovery.

[Wayne Anderson @DigitalSecArch]

@Tech_girlll The trades are going to make a come back. They may not be the sexiest thing going but AI isn't going to replace an electrician or a plumber or a diesel mechanic anytime soon.

[Wayne Anderson @DigitalSecArch]

@Its_Nova1012 Want to chat with other admins on the system at the same time? You had to figure out gcc to compile a copy of ytalk because they allowed it but didn't link a system wide binary because they didn't want "just anyone" using it.

[Wayne Anderson @DigitalSecArch]

@Its_Nova1012 Red Hat. Debian was the only other one out of the rest of this stuff that existed. You still mostly got Red Hat in a box at the time. Because the internet modems were lightning fast at 14.4k on the text only internet.