AI is not creating an entirely new set of security challenges, but it is forcing CISOs to rethink the urgency, scope, and prioritization of risks that have existed for years. This session will explore how security leaders have actually changed their programs in response to AI, from accelerating existing roadmaps and expanding controls to securing additional investment and revisiting previously accepted levels of risk. Panelists will discuss how AI is changing areas such as engineering access, application security, risk registers, and the expectations placed on security by boards and executive leadership. Rather than focusing on what organizations plan to do, the conversation will examine the concrete decisions CISOs are making today and how those changes are reshaping the broader security program.