Why AI Won’t Replace the CISO: Qualys’ Nathan Smolenski

At the Qualys ROCon Conference in Austin, Steve Lasky, Director of Content for Endeavor Business Media’s Security Group, sits down with Nathan Smolenski, CISO of Qualys, to talk AI, autonomous remediation, and the changing role of the security leader. Nathan draws on his experience on both the buyer and vendor side of cybersecurity, including years in the insurance industry, to discuss how CISOs actually make decisions, why cyber must be framed as business risk, and what it takes to keep AI-driven defenses accountable. Chapters 00:00 Intro: Steve Lasky and Nathan Smolenski 01:07 What vendors misunderstand about CISOs 04:27 Selling business value, not security 05:32 Cyber as business risk 06:59 CISO reporting lines and the board 08:03 Is the CISO operating model obsolete? 09:13 When defensive AI becomes a risk 10:40 Accountability can't be outsourced 11:49 Continuous security vs. continuous noise 12:45 Why organizational ontology matters 14:20 Cyber insurance and telematics 16:14 What stays human in the CISO role? 17:36 Rethinking how we apply labor 18:19 Closing thoughts SecurityInfoWatch: https://www.securityinfowatch.com/ Qualys: https://www.qualys.com/ #ciso #cybersecurity #ai #agenticai #Qualys #ROCon #vulnerabilitymanagement #cyberinsurance #riskmanagement #infosec