Beyond the firewall - From controls to context: Why AI assurance isn’t just cyber security 2.0

As AI systems become embedded in the core operations of businesses and governments, the way we assess and assure their security must evolve. In this presentation, Fiona explores the growing gap between traditional cybersecurity assurance approaches and the new frameworks emerging to govern the secure and responsible use of AI.

Drawing on real-world examples, regulatory trends, and industry best practices, Fiona will walk the audience through the core differences between cybersecurity control assurance and AI assurance.

While both domains share fundamental goals—reducing risk, increasing resilience, and maintaining trust—the methods, criteria, and context in which assurance is delivered diverge in significant ways.

Traditional cybersecurity assurance has focused on validating that a set of controls—such as access management, encryption, patching, and monitoring—are designed appropriately and operating effectively. These controls are typically assessed against well-established frameworks such as ISO 27001, NIST CSF, or the Australian Government’s Essential Eight. Evidence is reviewed, maturity levels are rated, and risks are prioritised based on likelihood and impact.

AI assurance, by contrast, introduces a multi-dimensional challenge that blends cybersecurity with data ethics, governance, explainability, and model performance. AI systems must be assessed not just for the integrity and security of the infrastructure on which they run, but for the decisions they make, the data they rely on, the fairness of their outcomes, and the transparency of their logic.

This presentation will highlight the following key differences:

Fiona will also explore how cybersecurity professionals can adapt their skills and tools to support AI assurance in their organisations. As AI becomes the next frontier in digital transformation, cyber teams are well-positioned to lead—but only if they understand the key differences and prepare accordingly.

This session is essential for cybersecurity leaders, risk managers, and governance professionals who want to stay ahead of the curve as AI moves from experimentation to mission-critical deployment.

Attendees will leave with a clearer understanding of where cybersecurity ends and AI assurance begins—and why both are critical to building trust in the digital systems of tomorrow.