AI is already part of everyday work. Employees use it to summarize documents, write code, translate text, and analyze information. Much of that use is legitimate and useful. Problems arise when employees turn to tools that sit outside approved corporate environments, leaving organizations with limited visibility over what is being used, what data is being shared, and what those tools can access or do.
On November 5, the Charter of Trust brought together experts from cybersecurity, enterprise risk, and technology to discuss how companies can manage Shadow AI without shutting down useful AI adoption.
Moderated by Friso Jankowsky (Atos), the panel featured Sudhir Ethiraj (TÜV SÜD), Tony Fergusson (Zscaler), Haydn Griffiths (Allianz Commercial), Scott Kannry (Axio), and Andy Schneider (Palo Alto Networks).
A clear message emerged: Shadow AI is often driven by unmet business demand. If approved tools are too limited, slow, or difficult to use, employees will look for alternatives.
The discussion highlighted four priorities:
- Make secure AI the easier option. Blanket bans can push AI use further into the shadows.
- Control data, access, and actions. AI agents should only see the information and perform the functions they need.
- Build security in from the start. Security by Default means clear guardrails, protected data flows, and defined recovery mechanisms.
- Prepare for faster incidents. AI can increase the speed and scale of both attacks and operational failures, making resilience and crisis preparedness more important.
The conclusion was not to slow AI adoption to a halt, but to make it safer through trusted tools, clear boundaries, and better preparation.
Thank you to everyone who joined the discussion. A recording of the webinar can be found at the bottom of this page.
PREVIOUS POST
A Practitioner’s Guide to Resilient Infrastructure Today & Tomorrow
NEXT POST
Annual Thematic Dinner on the sidelines of the Munich Security Conference
You may also like
External Engagement
Annual Thematic Dinner on the sidelines of the Munich Security Conference
On February 13, the Charter of Trust hosted its annual Thematic Dinner on the sidelines of the Munich Security Conference. This year’s discussion focused on "Rethinking Cyber Trust: Building Resilience in the Age of AI".
Leading transatlantic voices from government, military, industry, law enforcement, and cybersecurity came together for a critical discussion on the evolving threat landscape. Key themes emerged:
o the urgent need for harmonized regulation,
o the reality that it takes networks to defend networks,
o and the recognition that energy infrastructure represents our next major cyber risk frontier as AI drives exponential growth in energy consumption.
A powerful reminder that there is no security without cybersecurity, and no cybersecurity without active cyber defense. The path forward requires accelerated standards development, stronger public-private information sharing, and moving from reactive postures to coordinated defense strategies.
We are grateful for the engaged dialogue and look forward to continued collaboration as we work together to build cyber resilience in the age of AI.
Leading transatlantic voices from government, military, industry, law enforcement, and cybersecurity came together for a critical discussion on the evolving threat landscape. Key themes emerged:
o the urgent need for harmonized regulation,
o the reality that it takes networks to defend networks,
o and the recognition that energy infrastructure represents our next major cyber risk frontier as AI drives exponential growth in energy consumption.
A powerful reminder that there is no security without cybersecurity, and no cybersecurity without active cyber defense. The path forward requires accelerated standards development, stronger public-private information sharing, and moving from reactive postures to coordinated defense strategies.
We are grateful for the engaged dialogue and look forward to continued collaboration as we work together to build cyber resilience in the age of AI.
Read more
February 13, 2026
•
Security by Default
Webinar: Cybersecurity Regulations in North America
On Tuesday, the Charter of Trust convened a timely virtual panel discussion on 'Security by Default in View of Major Cybersecurity Regulations in North America'. With more than 100 participants joining from around the world, the discussion underscored just how urgent, and global, the cybersecurity challenge has become.
A huge thank you to our outstanding panellists for their invaluable insights and for sharing their experiences with us: Linda Strick (Cloud Security Alliance), Kyle McMillan (Siemens), Lauren Zabierek (CAS Strategies), Rob Spiger (Microsoft), Sam Curry (Zscaler), and great moderation from Sudhir Ethiraj (TÜV SÜD).
The CoT expert panel:
- discussed fragmented cybersecurity regulations in North America and the need for more resilient infrastructure and security-by-default practices
- emphasized the need to embed security early in product architecture rather than addressing it post-incident
- highlighted the importance of structured collection of security signals and incident reporting to improve software safety
- discussed about software as critical infrastructure affecting national security, economy, and public health, requiring robust safety measures
Thank you to everyone who participated! A recording of the webinar can be found at the bottom of this page.
A huge thank you to our outstanding panellists for their invaluable insights and for sharing their experiences with us: Linda Strick (Cloud Security Alliance), Kyle McMillan (Siemens), Lauren Zabierek (CAS Strategies), Rob Spiger (Microsoft), Sam Curry (Zscaler), and great moderation from Sudhir Ethiraj (TÜV SÜD).
The CoT expert panel:
- discussed fragmented cybersecurity regulations in North America and the need for more resilient infrastructure and security-by-default practices
- emphasized the need to embed security early in product architecture rather than addressing it post-incident
- highlighted the importance of structured collection of security signals and incident reporting to improve software safety
- discussed about software as critical infrastructure affecting national security, economy, and public health, requiring robust safety measures
Thank you to everyone who participated! A recording of the webinar can be found at the bottom of this page.
Read more
January 27, 2026
•
Artificial Intelligence
3rd CyberTrust Talk - Digital Omnibus & Trust - What it Means for Business in Europe?
Join us for a timely and dynamic edition focused on “Digital Omnibus & Trust: What It Means for Business in Europe” kindly hosted by the Representation of the Free State of Bavaria to the EU on November 20, 2025 at 11:00 AM (Central European Time) for a lunch event filled with insightful discussions on cybersecurity and trust in the digital age.
With the European Commission unveiling its landmark Digital Omnibus Package just one day before, this event is your exclusive opportunity to be among the first to explore its real-world impact on business and the digital economy across Europe.
What to Expect:
Opening remarks by:
Dr. Armin Hartmuth, Director, Representation of the Free State of Bavaria to the European Union
Dr. Sumit Chanda, COO, Atos Group Security & Business Lines CISO, and Co-Chair of the Charter of Trust.
Keynote Address:
Despina Spanou, Deputy Director General for Cybersecurity and Trust, European Commission (DG CNECT), will share first-hand insights into the objectives and expected impact of the Digital Omnibus Package.
Expert Panel Discussion featuring:Moderated by Sudhir Ethiraj, Global Head of Cybersecurity Office, CEO Business Unit Cybersecurity Services, TÜV SÜD.
Despina Spanou, Deputy Director General for Cybersecurity and Trust, European Commission (DG CNECT)
Kia Slæbæk Jensen, Cyber Advisor, Permanent Representation of Denmark to the EU
Suzanne Button, Field CTO EMEA, Elastic
Tomas Jakimavicius, Director European Government Affairs, Microsoft
Yana Humen, AI and Cybersecurity Policy Manager, Government and Regulatory Affairs, IBM
Interactive Q&A: Bring your questions and join the conversation on regulatory coherence, innovation, and the future of digital governance in Europe.
Closing remarks by Maria del Pino Gonzalez-Junco, Director of the Charter of Trust
Networking Lunch: Connect with peers, policymakers, and industry leaders in an informal setting.
Why attend?
Gain first-hand insights into the EU’s Digital Omnibus Package—straight from the policymakers and experts shaping it.
Understand the immediate implications for your business and how to navigate upcoming changes.
Be part of a strategic dialogue that could influence the future of digital regulation in Europe.
With the European Commission unveiling its landmark Digital Omnibus Package just one day before, this event is your exclusive opportunity to be among the first to explore its real-world impact on business and the digital economy across Europe.
What to Expect:
Opening remarks by:
Dr. Armin Hartmuth, Director, Representation of the Free State of Bavaria to the European Union
Dr. Sumit Chanda, COO, Atos Group Security & Business Lines CISO, and Co-Chair of the Charter of Trust.
Keynote Address:
Despina Spanou, Deputy Director General for Cybersecurity and Trust, European Commission (DG CNECT), will share first-hand insights into the objectives and expected impact of the Digital Omnibus Package.
Expert Panel Discussion featuring:Moderated by Sudhir Ethiraj, Global Head of Cybersecurity Office, CEO Business Unit Cybersecurity Services, TÜV SÜD.
Despina Spanou, Deputy Director General for Cybersecurity and Trust, European Commission (DG CNECT)
Kia Slæbæk Jensen, Cyber Advisor, Permanent Representation of Denmark to the EU
Suzanne Button, Field CTO EMEA, Elastic
Tomas Jakimavicius, Director European Government Affairs, Microsoft
Yana Humen, AI and Cybersecurity Policy Manager, Government and Regulatory Affairs, IBM
Interactive Q&A: Bring your questions and join the conversation on regulatory coherence, innovation, and the future of digital governance in Europe.
Closing remarks by Maria del Pino Gonzalez-Junco, Director of the Charter of Trust
Networking Lunch: Connect with peers, policymakers, and industry leaders in an informal setting.
Why attend?
Gain first-hand insights into the EU’s Digital Omnibus Package—straight from the policymakers and experts shaping it.
Understand the immediate implications for your business and how to navigate upcoming changes.
Be part of a strategic dialogue that could influence the future of digital regulation in Europe.
Read more
November 20, 2025
•
