In my last blog post, I argued that we don’t need more innovation invention to fix the broken state of SaaS and cloud security that Patrick Opet’s open letter was calling out. Instead, I said that what we need are different priorities. The conversations it triggered basically boiled down to this: if we already know
In my recap of RSAC 2025, I referenced the open letter that Patrick Opet, CISO of JPMorgan Chase, published in which he spoke about how essential security guardrails are being broken down by the lack of secure-by-design thinking in modern integration patterns within the SaaS world. His open letter challenged Cloud and SaaS providers to
Just wrapped up a packed, somewhat frenetic, but mostly enjoyable RSAC 2025 Conference. And if I had to sum it up in a sentence: AI is everywhere, but trust and control are still catching up. The conference opened with a shot fired across the bow of the security and identity industry. Patrick Opet, CISO of
