CIBC Security Chief on AI-Driven Cybersecurity Shifts
Joe LoBianco discusses how AI accelerates threats and reshapes bank vendor requirements.
1AI Supercharging Cyber Threats
Joe LoBianco, Executive Vice-President and Chief Information Security Officer at CIBC, notes that AI is significantly accelerating the pace of cyber threats. While security teams previously prioritized high-risk vulnerabilities, AI now enables attackers to chain lower-severity issues into complex, high-risk weaknesses. This shift forces banks to abandon traditional, slower remediation cycles.
2Evolving Defensive Strategies
CIBC is adjusting its defensive posture by embedding security earlier into product design and increasing automated testing throughout software development lifecycles. The bank now monitors breaches at other organizations to simulate potential failures in its own systems. These proactive measures aim to address both current and future threats effectively.
3New Demands for Vendors
The bank now requires near real-time vulnerability remediation, often demanding fixes within 24 hours or less. This represents a major departure from past practices where vendors had weeks to respond. Providers must prove their ability to maintain these high protection standards throughout the entire duration of the business relationship.
4Integration Over Performance
For CIBC, seamless integration into existing security workflows is more critical than marginal gains in product performance. A tool that is difficult to integrate hampers the bank's time-to-market and operational efficiency. Vendors must understand the specific internal systems and workflows of their customers to ensure successful, long-term software adoption.
5Complex Sales Cycles
Selling technology to major financial institutions like CIBC involves significant complexity and multiple stakeholders. Sean Duffy, Managing Director at CIBC Innovation Banking, notes that these sales processes can take years to complete. Technology founders must account for these extended timelines when planning their funding and go-to-market strategies for growth.
6Shift Toward Co-Development
CIBC is moving away from buying off-the-shelf software toward seeking design and development partners. The bank prefers collaborative relationships where vendors help co-develop solutions tailored to specific needs. This approach allows the bank to manage risk more effectively while leveraging external expertise for complex, mission-critical security infrastructure requirements.
7Strategic Patience for Founders
Founders should not narrow their market opportunities due to the slow pace of bank procurement. While winning a contract with a large institution is challenging, it provides immense credibility and long-term stability. Companies should maintain a broad focus and be prepared for the lengthy journey of enterprise-level sales cycles.
8Long-Term Partnership Value
CIBC views its technology providers as long-term partners rather than easily replaceable vendors. For companies willing to play the long game, the payoff includes years of reliable business and significant market validation. Few sectors offer the same combination of customer scale, spending power, and consistent demand for innovative security solutions.
Original article: BetaKit — CIBC Security Chief on AI-Driven Cybersecurity Shifts