AI and Cybersecurity in SMBs: Insights from Bruno Lecoq

Bruno Lecoq spent 20 years at Microsoft before founding BEMO, where he runs compliance and AI governance for small and medium businesses. In this episode he explains why blocking AI tools fails in practice - staff use them regardless - and what governing that use looks like: zero trust for smaller organisations, keeping AI costs under control as Microsoft's pricing shifts, and continuous compliance.We also talk about where security teams go from here as AI picks up more of their work, and the new risks that arrive with the tools, deepfakes included. Bruno's examples come from his own clients - AI changing how departments work with each other, and how companies oversee what staff do with it.Chapters00:00 Introduction to BEMO and Cybersecurity01:16 Understanding AI and Its Impact on BEMO03:04 The Rapid Evolution of AI04:33 AI's Impact on Work Environment and Governance05:59 Organizational Changes and Convergence of Departments09:36 Cross-Department Collaboration and Automation13:19 Software Engineering and Security Concerns16:45 Red Teaming and Agent Security Testing20:57 Identity Management and Agent Actions23:14 The Impact of the emdash24:14 Security Challenges and Deep Fakes25:28 Ensuring Authenticity in Hiring26:27 Conditional Access and Verified ID Face Check27:13 The Importance of Security and Compliance30:15 The Significance of CMMC Compliance31:17 The Role of Trust in the AI Era37:23 The Digital Divide and Regulatory Challenges39:08 Small to Medium Business Security and AI Adoption