# CIBC Security Chief on AI-Driven Cybersecurity Shifts

Joe LoBianco discusses how AI accelerates threats and reshapes bank vendor requirements.

- **Source:** [BetaKit](https://betakit.com)
- **Published:** 2026-11-09
- **Topic:** [technology](https://brifing.si/c/technology)
- **Original article:** <https://betakit.com/cibcs-security-chief-on-how-ai-is-changing-cybersecurity/>
- **On Brifing:** https://brifing.si/s/f5564e22-240a-497e-bb2a-22feababf1a9

## AI Supercharging Cyber Threats

Joe LoBianco, Executive Vice-President and Chief Information Security Officer at CIBC, notes that AI is significantly accelerating the pace of cyber threats. While security teams previously prioritized high-risk vulnerabilities, AI now enables attackers to chain lower-severity issues into complex, high-risk weaknesses. This shift forces banks to abandon traditional, slower remediation cycles.

## Evolving Defensive Strategies

CIBC is adjusting its defensive posture by embedding security earlier into product design and increasing automated testing throughout software development lifecycles. The bank now monitors breaches at other organizations to simulate potential failures in its own systems. These proactive measures aim to address both current and future threats effectively.

## New Demands for Vendors

The bank now requires near real-time vulnerability remediation, often demanding fixes within 24 hours or less. This represents a major departure from past practices where vendors had weeks to respond. Providers must prove their ability to maintain these high protection standards throughout the entire duration of the business relationship.

## Integration Over Performance

For CIBC, seamless integration into existing security workflows is more critical than marginal gains in product performance. A tool that is difficult to integrate hampers the bank's time-to-market and operational efficiency. Vendors must understand the specific internal systems and workflows of their customers to ensure successful, long-term software adoption.

## Complex Sales Cycles

Selling technology to major financial institutions like CIBC involves significant complexity and multiple stakeholders. Sean Duffy, Managing Director at CIBC Innovation Banking, notes that these sales processes can take years to complete. Technology founders must account for these extended timelines when planning their funding and go-to-market strategies for growth.

## Shift Toward Co-Development

CIBC is moving away from buying off-the-shelf software toward seeking design and development partners. The bank prefers collaborative relationships where vendors help co-develop solutions tailored to specific needs. This approach allows the bank to manage risk more effectively while leveraging external expertise for complex, mission-critical security infrastructure requirements.

## Strategic Patience for Founders

Founders should not narrow their market opportunities due to the slow pace of bank procurement. While winning a contract with a large institution is challenging, it provides immense credibility and long-term stability. Companies should maintain a broad focus and be prepared for the lengthy journey of enterprise-level sales cycles.

## Long-Term Partnership Value

CIBC views its technology providers as long-term partners rather than easily replaceable vendors. For companies willing to play the long game, the payoff includes years of reliable business and significant market validation. Few sectors offer the same combination of customer scale, spending power, and consistent demand for innovative security solutions.

## Sources covering this story

- https://betakit.com/cibcs-security-chief-on-how-ai-is-changing-cybersecurity/ — 

---

_Summary written by Brifing from the original reporting. Copyright in the original article belongs to its publisher; read the full piece at the link above._
