Phil Venables: Moving Security from Artisanal to Industrial

Welcome back to Zero Signal! In this episode, hosts Conor Sherman and Stuart Mitchell sit down with Phil Venables, Venture Partner at Ballistic Ventures and former CISO for both Google Cloud and Goldman Sachs. Phil shares his strategic vision for modern security programs, breaking down why defenders must transition from "artisanal" craft to "industrial" scale. By adopting automation, platform-embedded security, and Site Reliability Engineering principles—such as Control Reliability Engineering—security teams can drastically accelerate their OODA loop to outpace evolving threats. The conversation explores the rise of "CISO 2.0," examining how modern security executives must act as peer business leaders who drive commercial outcomes, demonstrate technical empathy with engineering teams, and manage broader digital risk spanning AI safety, privacy, and compliance. Phil offers a candid look at the future of cybersecurity, discussing the shift toward continuous control validation, the emerging challenge of managing multiple concurrent incidents, and why AI ultimately gives defenders a structural "home field advantage" over attackers. About the Guest Phil Venables is a Venture Partner at Ballistic Ventures. He previously served as the CISO for Google Cloud and was the long-time CISO and Chief Risk Officer at Goldman Sachs. He is a widely respected thought leader, author, and board member across the cybersecurity industry. Key Moments Moving from Artisanal Craftsmen to Industrial Scale Security The Evolution of CISO 2.0 & Navigating Chief Digital Risk Responsibilities Continuous Control Validation & Preparing for Concurrent Incidents Defenders' Structural Advantage: Why AI Long-Term Favors Defense Meet our Sponsors Hampton North is the premier US-based cybersecurity search firm: https://hamptonnorth.com/?utm_source=... Sysdig is the leader in AI-powered real-time cloud defense: https://www.sysdig.com/?utm_source=we... RISCPoint Security & compliance consulting tailored to your business: https://www.riscpoint.com/