Speaker kit

Bio & headshot

For event organizers, podcast hosts, and press. Use any of the bios below as written.

Brian E. Campbell

High-resolution headshots coming soon.

Short bio (about 50 words)

Brian E. Campbell is a Chief Information Security Officer and licensed attorney who treats security as a business differentiator. A hands-on technologist with a business-first mindset, he has led security in cybersecurity software and healthcare and is focused on helping companies adopt AI securely.

Full bio (about 150 words)

Brian E. Campbell is a Chief Information Security Officer known for a modern, practical approach to security: deeply technical, relentlessly focused on business outcomes, and grounded in a clear understanding of the law.

Brian has led security programs in cybersecurity software and healthcare, two industries where trust is the product and regulatory scrutiny is constant. He believes security rarely is the core business, but done well it becomes a differentiator that helps companies ship faster, win customers, and earn the confidence of regulators and boards.

Brian holds a J.D., an MBA, and a master's degree in computer science, and is pursuing a Ph.D. in computer science. As a licensed attorney, he has an unusual ability to translate privacy, healthcare, breach notification, and disclosure requirements into practical engineering and business decisions. He is currently focused on AI security and governance, helping organizations adopt AI quickly without taking on risks they can't see. He writes daily about securing AI agents and speaks on security leadership, AI risk, and cyber oversight for boards.

Introduction (for a host to read aloud)

"Our next speaker is Brian Campbell, a CISO who is also a licensed attorney. Brian is known for treating security as a business advantage rather than a cost center, and he's focused on how companies can adopt AI securely. Please welcome Brian Campbell."

Talk topics

  • The sandbox held. The attack worked anyway: AI coding agents as privileged insiders, and how to secure them.
  • Deterministic gates, AI triage: running AppSec when finding bugs is cheap and triage is the bottleneck.
  • What boards should ask about AI and cyber: plain-language oversight from a CISO who is also a lawyer.
  • Regulation on a 24-hour clock: the EU Cyber Resilience Act and disclosure readiness.