# ATT&CK → ATLAS: A CISO's Blueprint for AI Governance - Sandy Dunn - CSP #218

Page: https://stenobird.com/podcast/ciso-stories-podcast-audio-3570889/att-ck-atlas-a-ciso-s-blueprint-for-ai-governance-sandy-dunn-csp-218
Text version: https://stenobird.com/podcast/ciso-stories-podcast-audio-3570889/att-ck-atlas-a-ciso-s-blueprint-for-ai-governance-sandy-dunn-csp-218.md
Podcast: [CISO Stories Podcast (Audio)](https://stenobird.com/podcast/ciso-stories-podcast-audio-3570889)
Published: 2025-11-10T17:00:00+00:00
Episode link: https://cspaudio.libsyn.com/attck-atlas-a-cisos-blueprint-for-ai-governance-sandy-dunn-csp-218
Audio file: https://dts.podtrac.com/redirect.mp3/traffic.libsyn.com/secure/cspaudio/CSP_218_1--1143fc8a-721f-47d1-b151-2b22e1efc3e5--audio-converted--7e4e9853-e1d0-4f81-978d-c2d38463b634.mp3?dest-id=2584793
Processing state: not_requested
JSON: https://stenobird.com/v1/public/podcasts/ciso-stories-podcast-audio-3570889/episodes/att-ck-atlas-a-ciso-s-blueprint-for-ai-governance-sandy-dunn-csp-218
Duration seconds: 1675

## Resource

CISO Sandy Dunn breaks down her blueprint for AI-ready defense—pairing MITRE ATT&CK v18 with MITRE ATLAS to move from policy to behavior-based detections. We hit practical AI governance, her early focus on defending and understanding AI, and how OWASP GenAI tools turn checklists into action. Segment Resources: Article: https://www.linkedin.com/pulse/attck-v18-atlas-blueprint-ai-ready-defense-sandy-dunn-mafoc AI Cheat Sheet: https://www.linkedin.com/feed/update/urn:li:activity:7388688396166238208/ OWASP LLM Governance Checklist: https://genai.owasp.org/resource/llm-applications-cybersecurity-and-governance-checklist-english/ OWASP Threat Defense COMPASS: https://genai.owasp.org/resource/owasp-genai-security-project-threat-defense-compass-1-0/ Visit https://cisostoriespodcast.com for all the latest episodes! Show Notes: https://cisostoriespodcast.com/csp-218

## Actions

- request_transcript: `POST https://stenobird.com/v1/public/podcasts/ciso-stories-podcast-audio-3570889/episodes/att-ck-atlas-a-ciso-s-blueprint-for-ai-governance-sandy-dunn-csp-218/transcription-requests` — Idempotently request low-priority transcript generation for this episode.
- read_markdown: `GET https://stenobird.com/podcast/ciso-stories-podcast-audio-3570889/att-ck-atlas-a-ciso-s-blueprint-for-ai-governance-sandy-dunn-csp-218.md` — Read the agent-friendly Markdown representation of this episode resource.

A page view does not enqueue transcription. Agents should invoke `request_transcript` explicitly when they need this episode processed.

## Transcript

Full transcripts are not published on public pages unless there is a clear rights basis.