Teams building with emerging technologies like agentic AI are working where best practices are immature and the threat landscape is still being mapped. Controls designed for deterministic software struggle with systems that are non-deterministic, act autonomously, and change behavior with context.

Damian Tommasino, AI Forward Deployed CTO at Snyk, makes the case for moving from reaction to prevention. Instead of patching after incidents, teams can build risk thinking into design through threat modeling, secure defaults, and constrained permissions. He draws on real-world patterns of what goes wrong when teams move fast on new technology, and the lessons that carry over to other emerging domains.

This session closes with a practical playbook of steps your team can adopt now to keep innovating quickly without accumulating risk you can't see.

You'll learn:

  • Why traditional risk models fall short for non-deterministic, autonomous systems

  • How to embed risk prevention at design time with threat modeling, secure defaults, and constrained permissions

  • Which early failure patterns to watch for and the steps to move fast without unmanaged risk

Attendees are eligible to receive 1 CPE credit.

Generously supported by:

supported by logo
Speakers
speaker photo
Damian Tommasino
AI Forward Deployed CTO, Snyk

Damian Tommasino is an AI Forward Deployed CTO at Snyk, where he works with enterprise security and engineering leaders on securing AI-driven software development. He focuses on the shift from human-approved to agent-driven development, and on what that means for AppSec, supply chain risk, and AI governance. He is the author of several whitepapers on agentic security and he regularly advises executive teams on how to approach AI security within existing security programs.