How Zalando Deployed GenAI Without Handing Attackers the Keys with Florence Mottay

How Zalando Deployed GenAI Without Handing Attackers the Keys with Florence Mottay

by SANS Institute

Humanities, Social Sciences & Thought Computing & Cybersecurity UComputing and Information TechnologyURComputer security
🎙 SANS Institute 👥 70K 📅 May 1, 2026 ⏱ 38 min 👁 283 📄 expert opinion 🧭 2026-08-15
Available in: English (current) Français

Keywords

GenAIcyber resilienceAI threatssecurity leadershipZalando

Summary

In this episode of Cyber Leaders, hosts Ciaran Martin and James Lyne interview Florence Mottay, CISO of Zalando and Dutch CISO of the Year 2025. Mottay shares her journey from mathematics and software engineering to ethical hacking and leadership roles. The discussion focuses on the balance between traditional and AI-driven threats, emphasizing that while AI accelerates attacks, the fundamentals of security remain crucial. She advocates for a cyber resilience approach, preparing for rapid response and recovery. The conversation touches on the democratization of cybercrime through AI, the speed problem for defenders, and the need for faster mitigation. Mottay also discusses the cultural differences between US and European companies, noting that European firms are more cautious but benefit from regulations. She offers insights into deploying GenAI securely, highlighting the importance of embedding security in development processes and using infrastructure as code. The episode concludes with practical advice for security leaders on navigating the evolving threat landscape.

155 words

Critical Evaluation

Value of the Information & Strength of the Argument

The value of the information lies in the practical, experience-based insights from a leading CISO. Mottay provides a balanced view on AI threats, debunking hype and emphasizing that attackers still exploit basic vulnerabilities. Her argumentation is coherent, drawing on real-world examples and her own strategic approach at Zalando. She effectively argues for cyber resilience over mere prevention, and her points are well-structured and credible.

Scientific Rigor, Source Quality, Title Accuracy

The scientific rigor is moderate; the discussion is based on professional experience rather than formal research. No specific sources are cited, but the content aligns with known industry trends. The title accurately reflects the content, focusing on GenAI deployment and security. The podcast is part of a reputable series, and the guest’s credentials add credibility. However, the lack of verifiable references limits the rigor.

143 words

Title / Content Match

The title accurately reflects the core topic: deploying GenAI securely, with a focus on Zalando's approach and the guest's expertise.

Quality & Reliability

8/10

The content is an expert interview with a recognized CISO, providing practical insights and balanced perspectives. The discussion is grounded in professional experience and references to real-world incidents, but lacks formal citations or verifiable data, relying on anecdotal evidence.

Key Moments

Markers derived by PSI from the transcript: the creator did not define chapters.

Contribution & Novelties

The podcast provides a unique perspective from a CISO actively deploying GenAI in a large European company, offering practical lessons on balancing innovation with security. It contributes to the discourse on AI threats by emphasizing that the fundamentals remain key, and introduces the concept of cyber resilience as a strategic priority.

Pour aller plus loin :

92 words

Radar Profile

The radar profile shows high scores in quality and reliability, reflecting the expert's credibility and balanced arguments. The lower score in technical level indicates the content is accessible to a broad audience, while the moderate quantity of information suggests a focused discussion.

Reliability 8/10