Dominic Jainy is a seasoned IT professional whose career has been defined by the strategic integration of artificial intelligence, machine learning, and blockchain technologies. With a deep focus on digital resilience, he has become a leading voice in helping organizations navigate the increasingly hostile waters of modern cyber defense. Today, we sit down with Dominic to discuss the widening cyber skills gap—a critical exposure that is leaving many businesses vulnerable even as their digital footprints expand. Our conversation covers the evolving threat landscape where AI-driven attacks are the new norm, the complexity of distributed networks, and the strategic shift toward hybrid teams. Dominic shares his insights on why the traditional “go-it-alone” approach is failing and how the partnership between internal expertise and external support is becoming the gold standard for survival.
With critical infrastructure facing 200 cyber incidents over the past year alone, the digital landscape feels increasingly like a high-stakes arena where the attackers have the home-field advantage. How do you see the integration of AI in cybercrime changing the fundamental rules of engagement for defenders?
AI has shifted the tempo of the game entirely, making it feel less like a series of isolated events and more like a relentless, high-speed press across the entire pitch. When we look at the 200 incidents targeting critical infrastructure, it’s clear that adversaries are no longer just casting wide nets; they are using AI to lower the barrier to entry, allowing for more precise and coordinated strikes. This technological leap enables attackers to move with a speed that can easily overwhelm a traditional security posture that relies on manual intervention. It creates a sense of constant vigilance where defenders feel they are guarding a field that is growing larger by the day while their own team seems to be thinning out. Because only one attack needs to succeed for it to be “game over,” the pressure on human operators to match the machine-speed of AI-driven threats is reaching a breaking point. We are now in an era where the shadow of frontier AI extends the risk further than we ever anticipated, forcing us to defend against multiple, more precise threats simultaneously.
As environments become more distributed and complex, internal teams are often managing more assets with less clarity on who truly owns the risk. How does this lack of operational visibility and the widening skills gap specifically impact an organization’s ability to recover when an incident actually occurs?
The complexity of modern distributed networks often leaves teams feeling like they are navigating a maze in the dark. When you have a gap in expertise, that lack of clarity turns into a dangerous lag time during the “golden hour” of incident response, where every second costs thousands of dollars. We see teams that are stretched so thin that they lose track of where specific assets reside, leading to confusion over ownership and accountability that paralyzes decision-making. This means that when a breach happens, the process of containment takes significantly longer, and the road to recovery becomes a tangled mess of processes that haven’t been properly stress-tested. It’s heart-wrenching to see a team with great theoretical knowledge struggle because they haven’t had the hands-on experience to handle the sensory overload of a live crisis. Without those seasoned instincts, the people and processes supporting the technology become the very points of exposure that adversaries are looking to exploit first.
There is a persistent belief that migrating to the cloud inherently reduces risk or shifts the burden of resilience entirely to the provider. Why is this assumption of safety so prevalent, and what are the hidden dangers of not validating recovery capabilities in these environments?
It is a common and dangerous misconception that the cloud is a “set it and forget it” solution for security, which creates a massive blind spot in many strategies. Many organizations fall into a false sense of security, assuming that the provider’s infrastructure automatically covers their specific resilience needs, but the reality is a shared responsibility model. Without specialized knowledge, internal teams often leave massive gaps in their oversight, failing to realize that while the provider secures the “house,” the tenant is still responsible for what happens to the data inside it. I’ve seen situations where systems were believed to be secure and fully recoverable, yet they had never been put through a rigorous validation process to see how they perform under pressure. When an actual incident occurs, the shock of finding out that those assumptions were wrong is devastating and often leads to permanent data loss. Partners are now being brought in specifically to act as a reality check, providing that objective, third-party validation to ensure that resilience is actively managed rather than just assumed.
The data shows that 31% of businesses—roughly 3 in 10—are now outsourcing at least one aspect of their cybersecurity, yet there remains a level of hesitation regarding how well external partners understand their specific needs. How can organizations bridge this trust gap to build a truly effective hybrid team?
The shift to a hybrid model is born out of necessity, as 3 in 10 businesses recognize they simply cannot keep up with the 24/7 demands of modern security, such as Managed Detection and Response (MDR), on their own. However, that hesitation often stems from a fear that an external provider will just be another vendor rather than a partner who truly understands the heartbeat and unique risks of the organization. To bridge this gap, we are seeing a move away from purely transactional relationships toward a model of shared ownership where the partner is an extension of the internal team. This means bringing in “substitutes” who don’t just deliver a technology stack but actively guide strategy and work alongside internal staff to bolster defenses day-to-day. When a partner is deeply embedded in the operational fabric, they can help train junior staff and fill the void left by entry-level tasks that AI has taken over. This collaborative approach turns the “us versus them” mentality into a unified front, giving the board and insurers the confidence that the organization can maintain operations no matter what the threat landscape throws at them.
What is your forecast for cyber resilience?
I anticipate that by the time we reach 2028, the definition of resilience will have shifted from a purely technical metric to a fundamental pillar of corporate governance and board-level accountability. We will see a world where the “team” behind the technology is valued as much as the software itself, leading to a much more integrated ecosystem between internal IT departments and specialist partners who provide consistent coverage. Insurance scrutiny will likely be the primary catalyst for this shift, forcing organizations to move beyond theoretical readiness and into a cycle of continuous, validated testing and clear accountability. Ultimately, the winners will be those who stop trying to defend the entire pitch alone and instead master the art of the hybrid defense, where human intuition and machine intelligence work in perfect, resilient harmony. Resilience will no longer be defined by the tools you buy, but by the strength and readiness of the collective team you have built to manage them.