
Cybersecurity is a Business Risk, So Why are We Still Talking Tech?
A hard-hitting look at how cyber risk is reshaping the executive seat — and why the next mistake could be your last.
Hosted by Jo Peterson · ClearTech Loop · Episode 9
Episode Summary
In this episode, Zscaler VP and CISO-in-Residence Brad Moldenhauer explains why traditional cybersecurity strategies are no match for today’s financial and operational risks. From AI’s predictive capabilities to cyber materiality mandates, he reframes what risk really means — and how CISOs must evolve to stay relevant.
Three Questions We Tackle
1. What’s the financial impact of cyber risk — really?
Cybersecurity isn’t about tech — it’s about business continuity. Brad shares how to map cyber risk to revenue, cost, margin, and shareholder impact.
If you’re not helping the organization along those lines… frankly, you’re not the executive that you have aspirations of becoming.”
— Brad Moldenhauer, on aligning cyber strategy with business outcomes
2. How do we fix the disconnect between CISOs and the board?
Forget “security language.” Brad breaks down how to walk risk from the SOC to the balance sheet — and how that changes what the board hears.
“There are line items in the balance sheet for, you know, materiality by nature and materiality by impact… that should be the focus of cyber materiality assessments.”
— Brad Moldenhauer, on integrating cyber into financial risk models
3. Can AI really predict cyber attacks — and should it?
AI adds a fourth pillar to the risk equation: prediction. But misuse or over-restriction could backfire — even create extinction-level exposure.
“If you stay in that seat too long… that could be an extinction-level event.”
— Brad Moldenhauer, on over-restricting AI usage
Guest Bio: Brad Moldenhauer
Brad Moldenhauer is VP and CISO-in-Residence at Zscaler, where he leads global security transformation with a laser focus on customer value. With decades of experience across financial services, federal, and commercial sectors, he’s a trusted voice on cyber governance, AI security, and executive risk leadership.
What You’ll Learn in This Episode
- How to talk cyber risk in language your CFO and board understand
- Where AI is redefining security — and what to do about it
- The governance gaps that turn CISOs into scapegoats
Read the transcript: ClearTech Loop Season 1, Episode 9 Bill Moldenhauer, CISO-in-Residence, Zscaler (pdf)