PodChats for FutureCISO: How AI and quantum computing are redefining the cyber security landscape

In 2025, AI and quantum computing are transforming Asia's cybersecurity landscape, reshaping threats and roles. AI enhances defence capabilities but also fuels sophisticated attacks. Quantum computing threatens current encryption methods, necessitating a shift to quantum-safe algorithms. 

CISOs will do well to prioritize AI and quantum literacy to navigate these challenges. They must invest in post-quantum cryptography to safeguard against "harvest now, decrypt later" attacks and ensure AI defences are robust against adversarial attacks. Managing expectations while ensuring compliance is crucial as CEOs increasingly rely on these technologies for innovation and efficiency. Proactive strategies are essential for maintaining security and trust.

In this PodChats for FutureCISO, Paul Tan, head of systems integration at Ensign InfoSecurity, talks about the evolving nature of cybersecurity strategies as technologies like AI and quantum computing accelerate their influence in cybersecurity defence and offense, and redefining the cybersecurity profession.

1. Given that AI and quantum computing are rapidly reshaping the cybersecurity landscape, what immediate steps should CISOs in Asia take to ensure their teams possess the necessary AI and quantum literacy to navigate this evolving threat environment?
2. In what ways are you observing AI being leveraged by both cybersecurity defenders and malicious actors, and what proactive measures can CISOs implement to stay ahead of these dual-use applications?
3. Considering the potential vulnerabilities of AI-driven security systems to adversarial attacks like data poisoning, what strategies can CISOs employ to ensure the robustness and resilience of their AI defences?
4. As quantum computing threatens to render current encryption methods obsolete, what is your recommended timeline for organisations to transition to quantum-safe cryptographic algorithms, and what are the key challenges in implementing these systems?
5. With the advent of quantum computing, how should organisations reassess their strategies for protecting sensitive data against "harvest now, decrypt later" attacks, and what role does post-quantum cryptography play in this? Hybrid cryptography
6. How do CEOs' and business unit leaders' high expectations for AI and Quantum computing impact the CISO's role in managing expectations, integrating these technologies into operations, and ensuring regulatory compliance?
7. Let's recap: given what we know about AI and PQC, what is your advice for CISOs in 2025?