ReadingResearchRadarInvestment framework
Sign in / Sign up
← Back to reading
NewsTopic · AIUC智能体安全框架1 min read·2026-10-18

Former Google Cloud CISO Phil Venables on AI Agent Governance

Hosted by Noma Security CISO Diana Kelley, this episode features Phil Venables, former CISO of Google Cloud with nearly two decades at Goldman Sachs. The discussion focuses on how AI expands CISO responsibilities towards becoming a "Chief Digital Risk Officer" and explores enterprise agentic control planes and emerging security frameworks.

ImportanceMaterialEvidenceE2 unreplicatedWrite-upQuick

2026-10-08 21:00 GMT+8

This episode of The Blast Radius podcast, published on October 8, 2026, is hosted by Diana Kelley, CISO of Noma Security, and features Phil Venables, former CISO of Google Cloud. With nearly twenty years of security experience at Goldman Sachs followed by his tenure at Google Cloud, Venables provides an authoritative perspective on security governance in large technology firms and financial institutions.

According to the publisher's official episode description, the content centers on how AI technology is transforming the CISO role. Venables suggests that the CISO position is evolving into a "Chief Digital Risk Officer," encompassing broader responsibilities across security, privacy, and compliance. Specific topics listed include building influence with boards, enduring security controls like identity management and strong authentication, and methods for integrating security, privacy, and compliance to improve engineering outcomes.

Addressing current concerns in the AI industry regarding agent security, the episode specifically discusses the practical meaning of an "enterprise agentic control plane" and an emerging approach described by Venables as "SOC 2 for agents" (AIUC). Additionally, as an investor, Venables shares his views on the second-order effects of agentic AI and his investment focus. For professional readers interested in AI infrastructure security governance trends, this episode offers clear topic guidance based on experienced practitioner insights.

Sign in / Sign up
ReadingResearchRadarInvestment framework

Sources

  • 原始出处youtube.com↗
Topic

AIUC智能体安全框架

AIUC-1是由人工智能承保公司(AIUC)推出的首个针对AI智能体的安全、可靠性与保险标准。该框架旨在解决企业部署自主智能体时面临的信任危机,通过“审计+保险”的闭环机制,将技术风险转化为可量化的金融责任。

4 steps1 piecesUpdated 2026-10-18 03:44

How it got here

  1. 2025-07-01AIUC从隐身状态推出,完成1500万美元种子轮融资,由Nat Friedman领投,确立“审计+保险”模式。
  2. 2026-02-06AIUC宣布与Cisco合作,将其AI安全框架的操作化纳入AIUC-1标准,并确认Schellman为首家认证审计机构。
  3. 2026-04-15AIUC-1 Q2版本生效,新增23项控制措施,重点覆盖MCP/A2A协议安全及智能体身份与访问管理分离。

What is still unsettled

  • AIUC-1作为私营标准,能否在监管层面获得与NIST AI RMF同等的法律认可?
  • 保险定价模型是否真的能有效抑制企业对安全控制的‘最小化合规’倾向?
  • 随着智能体能力扩展,季度更新的节奏是否足以应对新型零日漏洞?
Read the full topic →
Continue researching →