Raj Sahas CISM, PMP

Principal, Security Engineering & Operations​
“In business & security alike, consistent actions create better outcomes.”

Raj Responds to Key Questions

When executives ask "How much security is enough?" - how do you answer that?

Security is like fitness — you start with small goals such as using strong passwords and keeping systems updated. As you progress, you add more protection like monitoring and response, just like increasing workout intensity. If you stop, security weakens over time, so the key is steady, balanced effort.

What's the biggest cybersecurity myth that's costing organizations money?

Companies spend millions on advanced security tools. But the biggest breaches still start with people – the weakest link. Real security isn’t just about tech, it’s about winning human awareness and vigilance.

What's the most expensive security mistake you've seen an organization make?

Shared admin accounts.

What's changed the most about cybersecurity since you started your career?

Attack surfaces have exploded with cloud, mobile, and IoT, while attackers have become far more advanced. Staying secure today means constant adaptation, not static defenses.

What's the first thing you assess when you walk into a new client engagement?

The first thing I assess in a new client engagement isn’t the tech – it’s the organization’s buy-in for security. Without leadership support and cultural alignment, even the best tools and policies won’t stick. Security success starts with people, not products.

What do you wish every CEO understood about cybersecurity?

I wish every CEO understood that security is a practice, not a product – and yes, the organization will be hacked, it’s only a matter of when. The best CEOs don’t just hope to avoid breaches, they plan for resilience. Recovery speed and business continuity are the real measures of security leadership.

What do businesses and organizations need to know about AI?

AI will soon be embedded into every business and organization. Leaders need to understand how to embrace and work alongside AI to boost efficiency and growth, while also preparing for the unique security challenges it introduces. Success will come from balancing innovation with responsible, secure adoption.

What's the biggest AI mistake you're seeing organizations make right now?

The biggest AI mistake I see right now is treating AI like a hammer where every problem looks like a nail. Many organizations assume AI is the solution to everything, but they quickly discover that implementation and ongoing support are the real challenges. Success with AI comes from thoughtful use cases, not blind adoption.