Image: files.cyberriskalliance.com · rights & removal

Measuring the Value of SecOps; BH Interviews with Fortra, Helmet, Above, & Keeper - Christopher Crowley, Josh Davies, Kaushik Shanadi, Tricia Howard, Darren Guccione

Reporting by SC MagazineRead the original at scworld.com

Executive Summary

The material introduces several expert perspectives on modern cybersecurity challenges, focusing on the necessity of Security Operations (SecOps) training, the evolving landscape of AI security, and the governance of identity in agentic systems. Christopher Crawley discusses the value of SecOps for leadership communication, supported by resources promoting his book. Josh Davies details threat intelligence research from Fortra covering social engineering and credential theft. Kaushik Shanadi addresses the need for defense-in-depth when securing autonomous AI agents, emphasizing that individual controls are insufficient. Tricia Howard examines the shortcomings of legacy insider risk tools in the context of agentic AI, highlighting the gap in understanding human and AI intent through behavioral intelligence. Darren Guccione discusses the identity crisis in enterprise environments regarding AI agents, noting that traditional security software is inadequate for governing non-human identities. The collective themes center on the need for broader, layered strategies—combining operational awareness with advanced identity governance—to manage increasingly complex risks posed by evolving threats and autonomous systems.

Facts Only

* Christopher Crawley authored "The Value of Cybersecurity Operations" to inform practitioners on justifying SecOps necessity to leadership.
* Fortra Intelligence and Research Experts (FIRE) share research on phishing, fraud, social engineering, and credential theft.
* Kaushik Shanadi advocates for a defense-in-depth strategy for agentic AI security, as individual controls are insufficient.
* Tricia Howard notes that legacy insider risk management tools fail to address risks posed by agents with broad access.
* Darren Guccione discusses the identity crisis surrounding AI agents, noting traditional security software cannot govern non-human identities.
* Christopher Crowley teaches advanced threat detection and monitoring, including data science and AI/ML for cybersecurity professionals.
* Josh Davies coordinates FIRE research on threat intelligence derived from big data analysis of phishing and social engineering.
* Keeper Security's research indicates that 89% of cybersecurity decision-makers view AI adoption as complicating identity management.

Full Take

The narrative juxtaposes the historical necessity of formal operational structures (SecOps) against the emergent complexity of autonomous systems (Agentic AI). A key tension appears in reconciling human-centric security paradigms, which rely on established governance and accountability for human actors, with non-human entities. The discussion moves from justifying a necessary operational function to confronting an identity crisis where the targets of control are themselves shifting—from human users to sophisticated AI agents. This progression suggests that future security strategy cannot be built merely by layering technical controls; it requires a meta-framework for governance that addresses intent across the entire stack. The focus on behavioral intelligence, as seen with Tricia Howard’s perspective on insider risk and Josh Davies' threat research, points toward the inevitable need to operationalize the understanding of *intent* rather than just monitoring static events. The underlying implication is that the failure point in modern security is not technical oversight but the failure to establish cohesive, adaptive governance structures capable of mapping and controlling emergent, distributed forms of digital agency. What are the overlooked historical parallels where systems have failed to account for non-human decision-makers? What assumptions about human control versus systemic capability are we making about AI agents that could inadvertently create new vectors for risk?

From the original · SC Magazine

Interview with Christopher Crawley - The Value of SecOps This week, we talk to Chris Crawley about his new book, The Value of Cybersecurity Operations. Chris has been training teams on security operations for years, but found that students often struggled to justify the importance of secops training and even the need for secops in general.

Read the full story at scworld.com

Sentinel — Human

Confidence

This appears to be a professionally structured feature or editorial piece synthesizing interviews with cybersecurity experts; the structure suggests human editorial control over synthesized information.

Signals Detected

Moderate sentence length variance; uses varied structure appropriate for an interview/feature.

Maintains a consistent narrative flow linking disparate expert interviews, characteristic of editorial content.

Organized around named experts and their specific contributions; clear structure for attribution.

Specific details (names, titles, product mentions) are present, suggesting real-world sourcing, although the framing is promotional.

Human Indicators

The text effectively weaves together multiple distinct expert perspectives with specific, seemingly verifiable professional roles and accomplishments. The tone shifts naturally between academic discussion (Crawley) and high-level strategy (Guccione, Davies).