There’s no doubt about it – artificial intelligence has revolutionized almost every aspect of modern life. Healthcare, finance, and manufacturing are just some of the sectors that have been virtually turned upside down by this powerful new force. Cybersecurity also ranks high on this list.

But as much as AI can benefit cybersecurity, it also presents new challenges. Or – to be more direct –new threats.

To understand just how serious these threats are, we’ve enlisted the help of two prominent figures in the cybersecurity world – Tom Vazdar and Venicia Solomons. Tom is the chair of the Master’s Degree in Enterprise Cybersecurity program at the Open Institute of Technology (OPIT). Venicia, better known as the “Cyber Queen,” runs a widely successful cybersecurity community looking to empower women to succeed in the industry.

Together, they held a master class titled “Cyber Threat Landscape 2024: Navigating New Risks.” In this article, you get the chance to hear all about the double-edged sword that is AI in cybersecurity.

How Can Organizations Benefit From Using AI in Cybersecurity?

As with any new invention, AI has primarily been developed to benefit people. In the case of AI, this mainly refers to enhancing efficiency, accuracy, and automation in tasks that would be challenging or impossible for people to perform alone.

However, as AI technology evolves, its potential for both positive and negative impacts becomes more apparent.

But just because the ugly side of AI has started to rear its head more dramatically, it doesn’t mean we should abandon the technology altogether. The key, according to Venicia, is in finding a balance. And according to Tom, this balance lies in treating AI the same way you would cybersecurity in general.

Keep reading to learn what this means.

Top of Form

Implement a Governance Framework

In cybersecurity, there is a governance framework called ISO/IEC 27000, whose goal is to provide a systematic approach to managing sensitive company information, ensuring it remains secure. A similar framework has recently been created for AI— ISO/IEC 42001.

Now, the trouble lies in the fact that many organizations “don’t even have cybersecurity, not to speak artificial intelligence,” as Tom puts it. But the truth is that they need both if they want to have a chance at managing the risks and complexities associated with AI technology, thus only reaping its benefits.

Implement an Oversight Mechanism

Fearing the risks of AI in cybersecurity, many organizations chose to forbid the usage of this technology outright within their operations. But by doing so, they also miss out on the significant benefits AI can offer in enhancing cybersecurity defenses.

So, an all-out ban on AI isn’t a solution. A well-thought-out oversight mechanism is.

According to Tom, this control framework should dictate how and when an organization uses cybersecurity and AI and when these two fields are to come in contact. It should also answer the questions of how an organization governs AI and ensures transparency.

With both of these frameworks (governance and oversight), it’s not enough to simply implement new mechanisms. Employees should also be educated and regularly trained to uphold the principles outlined in these frameworks.

Control the AI (Not the Other Way Around!)

When it comes to relying on AI, one principle should be every organization’s guiding light. Control the AI; don’t let the AI control you.

Of course, this includes controlling how the company’s employees use AI when interacting with client data, business secrets, and other sensitive information.

Now, the thing is – people don’t like to be controlled.

But without control, things can go off the rails pretty quickly.

Tom gives just one example of this. In 2022, an improperly trained (and controlled) chatbot gave an Air Canada customer inaccurate information and a non-existing discount. As a result, the customer bought a full-price ticket. A lawsuit ensued, and in 2024, the court ruled in the customer’s favor, ordering Air Canada to pay compensation.

This case alone illustrates one thing perfectly – you must have your AI systems under control. Tom hypothesizes that the system was probably affordable and easy to implement, but it eventually cost Air Canada dearly in terms of financial and reputational damage.

How Can Organizations Protect Themselves Against AI-Driven Cyberthreats?

With well-thought-out measures in place, organizations can reap the full benefits of AI in cybersecurity without worrying about the threats. But this doesn’t make the threats disappear. Even worse, these threats are only going to get better at outsmarting the organization’s defenses.

So, what can the organizations do about these threats?

Here’s what Tom and Venicia suggest.

Fight Fire With Fire

So, AI is potentially attacking your organization’s security systems? If so, use AI to defend them. Implement your own AI-enhanced threat detection systems.

But beware – this isn’t a one-and-done solution. Tom emphasizes the importance of staying current with the latest cybersecurity threats. More importantly – make sure your systems are up to date with them.

Also, never rely on a single control system. According to our experts, “layered security measures” are the way to go.

Never Stop Learning (and Training)

When it comes to AI in cybersecurity, continuous learning and training are of utmost importance – learning for your employees and training for the AI models. It’s the only way to ensure all system aspects function properly and your employees know how to use each and every one of them.

This approach should also alleviate one of the biggest concerns regarding an increasing AI implementation. Namely, employees fear that they will lose their jobs due to AI. But the truth is, the AI systems need them just as much as they need those systems.

As Tom puts it, “You need to train the AI system so it can protect you.”

That’s why studying to be a cybersecurity professional is a smart career move.

However, you’ll want to find a program that understands the importance of AI in cybersecurity and equips you to handle it properly. Get a master’s degree in Enterprise Security from OPIT, and that’s exactly what you’ll get.

Join the Bigger Fight

When it comes to cybersecurity, transparency is key. If organizations fail to report cybersecurity incidents promptly and accurately, they not only jeopardize their own security but also that of other organizations and individuals. Transparency builds trust and allows for collaboration in addressing cybersecurity threats collectively.

So, our experts urge you to engage in information sharing and collaborative efforts with other organizations, industry groups, and governmental bodies to stay ahead of threats.

How Has AI Impacted Data Protection and Privacy?

Among the challenges presented by AI, one stands out the most – the potential impact on data privacy and protection. Why? Because there’s a growing fear that personal data might be used to train large AI models.

That’s why European policymakers sprang into action and introduced the Artificial Intelligence Act in March 2024.

This regulation, implemented by the European Parliament, aims to protect fundamental rights, democracy, the rule of law, and environmental sustainability from high-risk AI. The act is akin to the well-known General Data Protection Regulation (GDPR) passed in 2016 but exclusively targets the use of AI. The good news for those fearful of AI’s potential negative impact is that every requirement imposed by this act is backed up with heavy penalties.

But how can organizations ensure customers, clients, and partners that their data is fully protected?

According to our experts, the answer is simple – transparency, transparency, and some more transparency!

Any employed AI system must be designed in a way that doesn’t jeopardize anyone’s privacy and freedom. However, it’s not enough to just design the system in such a way. You must also ensure all the stakeholders understand this design and the system’s operation. This includes providing clear information about the data being collected, how it’s being used, and the measures in place to protect it.

Beyond their immediate group of stakeholders, organizations also must ensure that their data isn’t manipulated or used against people. Tom gives an example of what must be avoided at all costs. Let’s say a client applies for a loan in a financial institution. Under no circumstances should that institution use AI to track the client’s personal data and use it against them, resulting in a loan ban. This hypothetical scenario is a clear violation of privacy and trust.

And according to Tom, “privacy is more important than ever.” The same goes for internal ethical standards organizations must develop.

Keeping Up With Cybersecurity

Like most revolutions, AI has come in fast and left many people (and organizations) scrambling to keep up. However, those who recognize that AI isn’t going anywhere have taken steps to embrace it and fully benefit from it. They see AI for what it truly is – a fundamental shift in how we approach technology and cybersecurity.

Those individuals have also chosen to advance their knowledge in the field by completing highly specialized and comprehensive programs like OPIT’s Enterprise Cybersecurity Master’s program. Coincidentally, this is also the program where you get to hear more valuable insights from Tom Vazdar, as he has essentially developed this course.

Related posts

OPIT Supporting a New Generation of Cybersecurity Leaders
OPIT - Open Institute of Technology
OPIT - Open Institute of Technology
Aug 28, 2025 5 min read

The Open Institute of Technology (OPIT) began enrolling students in 2023 to help bridge the skills gap between traditional university education and the requirements of the modern workplace. OPIT’s MSc courses aim to help professionals make a greater impact on their workplace through technology.

OPIT’s courses have become popular with business leaders hoping to develop a strong technical foundation to understand technologies, such as artificial intelligence (AI) and cybersecurity, that are shaping their industry. But OPIT is also attracting professionals with strong technical expertise looking to engage more deeply with the strategic side of digital innovation. This is the story of one such student, Obiora Awogu.

Meet Obiora

Obiora Awogu is a cybersecurity expert from Nigeria with a wealth of credentials and experience from working in the industry for a decade. Working in a lead data security role, he was considering “what’s next” for his career. He was contemplating earning an MSc to add to his list of qualifications he did not yet have, but which could open important doors. He discussed the idea with his mentor, who recommended OPIT, where he himself was already enrolled in an MSc program.

Obiora started looking at the program as a box-checking exercise, but quickly realized that it had so much more to offer. As well as being a fully EU-accredited course that could provide new opportunities with companies around the world, he recognized that the course was designed for people like him, who were ready to go from building to leading.

OPIT’s MSc in Cybersecurity

OPIT’s MSc in Cybersecurity launched in 2024 as a fully online and flexible program ideal for busy professionals like Obiora who want to study without taking a career break.

The course integrates technical and leadership expertise, equipping students to not only implement cybersecurity solutions but also lead cybersecurity initiatives. The curriculum combines technical training with real-world applications, emphasizing hands-on experience and soft skills development alongside hard technical know-how.

The course is led by Tom Vazdar, the Area Chair for Cybersecurity at OPIT, as well as the Chief Security Officer at Erste Bank Croatia and an Advisory Board Member for EC3 European Cybercrime Center. He is representative of the type of faculty OPIT recruits, who are both great teachers and active industry professionals dealing with current challenges daily.

Experts such as Matthew Jelavic, the CEO at CIM Chartered Manager Canada and President of Strategy One Consulting; Mahynour Ahmed, Senior Cloud Security Engineer at Grant Thornton LLP; and Sylvester Kaczmarek, former Chief Scientific Officer at We Space Technologies, join him.

Course content includes:

  • Cybersecurity fundamentals and governance
  • Network security and intrusion detection
  • Legal aspects and compliance
  • Cryptography and secure communications
  • Data analytics and risk management
  • Generative AI cybersecurity
  • Business resilience and response strategies
  • Behavioral cybersecurity
  • Cloud and IoT security
  • Secure software development
  • Critical thinking and problem-solving
  • Leadership and communication in cybersecurity
  • AI-driven forensic analysis in cybersecurity

As with all OPIT’s MSc courses, it wraps up with a capstone project and dissertation, which sees students apply their skills in the real world, either with their existing company or through apprenticeship programs. This not only gives students hands-on experience, but also helps them demonstrate their added value when seeking new opportunities.

Obiora’s Experience

Speaking of his experience with OPIT, Obiora said that it went above and beyond what he expected. He was not surprised by the technical content, in which he was already well-versed, but rather the change in perspective that the course gave him. It helped him move from seeing himself as someone who implements cybersecurity solutions to someone who could shape strategy at the highest levels of an organization.

OPIT’s MSc has given Obiora the skills to speak to boards, connect risk with business priorities, and build organizations that don’t just defend against cyber risks but adapt to a changing digital world. He commented that studying at OPIT did not give him answers; instead, it gave him better questions and the tools to lead. Of course, it also ticks the MSc box, and while that might not be the main reason for studying at OPIT, it is certainly a clear benefit.

Obiora has now moved into a leading Chief Information Security Officer Role at MoMo, Payment Service Bank for MTN. There, he is building cyber-resilient financial systems, contributing to public-private partnerships, and mentoring the next generation of cybersecurity experts.

Leading Cybersecurity in Africa

As well as having a significant impact within his own organization, studying at OPIT has helped Obiora develop the skills and confidence needed to become a leader in the cybersecurity industry across Africa.

In March 2025, Obiora was featured on the cover of CIO Africa Magazine and was then a panelist on the “Future of Cybersecurity Careers in the Age of Generative AI” for Comercio Ltd. The Lagos Chamber of Commerce and Industry also invited him to speak on Cybersecurity in Africa.

Obiora recently presented the keynote speech at the Hackers Secret Conference 2025 on “Code in the Shadows: Harnessing the Human-AI Partnership in Cybersecurity.” In the talk, he explored how AI is revolutionizing incident response, enhancing its speed, precision, and proactivity, and improving on human-AI collaboration.

An OPIT Success Story

Talking about Obiora’s success, the OPIT Area Chair for Cybersecurity said:

“Obiora is a perfect example of what this program was designed for – experienced professionals ready to scale their impact beyond operations. It’s been inspiring to watch him transform technical excellence into strategic leadership. Africa’s cybersecurity landscape is stronger with people like him at the helm. Bravo, Obiora!”

Learn more about OPIT’s MSc in Cybersecurity and how it can support the next steps of your career.

Read the article
How Regenerative Business Models Are Redefining Innovation and Sustainability
OPIT - Open Institute of Technology
OPIT - Open Institute of Technology
Aug 18, 2025 6 min read

Open Institute of Technology (OPIT) masterclasses bring students face-to-face with real-world business challenges. In OPIT’s July masterclass, OPIT Professor Francesco Derchi and Ph.D. candidate Robert Mario de Stefano explained the principles of regenerative businesses and how regeneration goes hand in hand with growth.

Regenerative Business Models

Professor Derchi began by explaining what exactly is meant by regenerative business models, clearly differentiating them from sustainable or circular models.

Many companies pursue sustainable business models in which they offset their negative impact by investing elsewhere. For example, businesses that are big carbon consumers will support nature regeneration projects. Circular business models are similar but are more focused on their own product chain, aiming to minimize waste by keeping products in use as long as possible through recycling. Both models essentially aim to have a “net-zero” negative impact on the environment.

Regenerative models are different because they actively aim to have a “net-positive” impact on the environment, not just offsetting their own use but actively regenerating the planet.

Massive Transformative Purpose

While regenerative business models are often associated with philanthropic endeavors, Professor Derchi explained that they do not have to be, and that investment in regeneration can be a driver of growth.

He discussed the importance of corporate purpose in the modern business space. Having a strong and clearly stated corporate purpose is considered essential to drive business decision-making, encourage employee buy-in, and promote customer loyalty.

But today, simple corporate missions, such as “make good shoes,” don’t go far enough. People are looking for a Massive Transformational Purpose (MTP) that can take the business to the next level.

Take, for example, Ben & Jerry’s. The business’s initial corporate purpose may have been to make great ice cream and serve it up in a way that people will enjoy. But the business really began to grow when they embraced an MTP. As they announced in their mission statement, “We believe that ice cream can change the world.” Their business activities also have the aim of advancing human rights and dignity, supporting social and economic justice, and protecting and restoring the Earth’s natural systems. While these aims are philanthropic, they have also helped the business grow.

RePlanet

Professor Derchi next talked about RePlanet, a business he recently worked to develop their MTP. Founded in 2015, RePlanet designs and implements customized renewable energy solutions for businesses and projects. The company already operates in the renewable energy field and ranked as the 21st fastest-growing business in Italy in 2023. So while they were already enjoying great success, Derchi worked with them to see if actively embracing a regenerative business model could unlock additional growth.

Working together, RePlanet moved towards an MTP of building a greener future based on today’s choices, ensuring a cleaner world for generations. Meeting this goal started with the energy products that RePlanet sells, such as energy systems that recover heat from dairy farms. But as the business’s MTP, it goes beyond that. RePlanet doesn’t just engage suppliers; it chooses partners that share its specific values. It also influences the projects they choose to work on – they prioritize high-impact social projects, such as recently installing photovoltaic energy systems at a local hospital in Nigeria – and how RePlanet treats its talent, acknowledging that people are the true energy of the company.

Regenerative Business Strategies

Based on work with RePlanet and other businesses, Derchi has identified six archetypal regenerative business strategies for businesses that want to have both a regenerative impact and drive growth:

  • Regenerative Leadership – Laying the foundation for regeneration in a broader sense throughout the company
  • Nature Regeneration – Strategies to improve the health of the natural world
  • Social Regeneration – Regenerating human ecosystems through things such as fair-trade practices
  • Responsible Sourcing – Empowering and strengthening suppliers and their communities
  • Health & Well-being – Creating products and services that have a positive effect on customers
  • Employee Focus – Improve work conditions, lives, and well-being of employees.

Case Studies

Building on the concept of regenerative business models, Roberto Mario de Stefano shared other case studies of businesses that are having a positive impact and enjoying growth thanks to regenerative business models and strategies.

Biorfarm

Biorfarm is a digital platform that supports small-scale agriculture by creating a direct link between small farmers and consumers. Cutting out the middleman in modern supply chains means that farmers earn about 50% more for their produce. They set consumers up as “digital farmers” who actively support and learn about farming activities to promote more conscious food consumption.

Their vision is to create a food economy in which those who produce food and those who consume it are connected. This moves consumers from passive cash cows for large corporations that prioritize profits over the well-being of farmers to actively supporting natural production and a more sustainable system.

Rifo Lab

Rifo Lab is a circular clothing brand with the vision of addressing the problem of overproduction in the clothing industry. Established in Prato, Italy, a traditional textile-producing area, the company produces clothes made from textile waste and biodegradable materials. There are no physical stores, and all orders must be placed online; everything is made to order, reducing excess production.

With an eye on social regeneration, all production takes place within 30 kilometers of their offices, allowing the business to support ethical and local production. They also work with companies that actively integrate migrants into the local community, sharing their local artisan crafts with future generations.

Ogyre

Ogyre is a digital platform that allows you to pay fishermen to fish for waste. When fishermen are out conducting their livelihood, they also collect a significant amount of waste from the ocean, especially plastic waste. Ogyre arranges for fishermen to get paid for collecting that waste, which in turn supports the local fishing communities, and then transforms the waste collected into new sustainable products.

Moving Towards a Regenerative Future

The masterclass concluded with a Q&A session, where it explained that working in regenerative businesses requires the same skills as any other business. But it also requires you to embrace a mindset where value comes from giving and that growth is about working together for a better future, and not just competition.

Read the article