Jim Foote: Do not be afraid of failure and I hate the phrase “failure,” however when you’re not failing, you are not pushing the boundaries of your personal skills and the boundaries of expertise. And if you are going to fail, fail ahead.
David Moulton: Welcome to “Risk Vector.” The Palo Alto Networks podcast the place we focus on urgent cybersecurity threats, cyber resilience, and uncover insights into the newest trade traits. I am your host, David Moulton, Director of Thought Management for Unit 42. [ Music ] In right now’s episode, I’ll be speaking with Jim Foote, the CEO of First Ascent Biomedical. Jim and I’ll focus on his present mission at First Ascent, and among the inspiring work his firm is main utilizing their MLAI platform to quickly establish therapeutic options for most cancers sufferers the place the choices for traditional care have been exhausted. We’ll additionally focus on how Jim’s background in safety informs his work within the medical subject. Jim makes use of the teachings discovered as a CISO from deploying and utilizing cutting-edge expertise to preventing cyber criminals and his battle in opposition to most cancers, and reached out to see if he can be keen to share his story concerning the shift from CISO to CEO with the “Risk Vector” viewers. I will have a hyperlink to the IT Brew article within the present notes. [ Music ] Jim thanks for becoming a member of me on “Risk Vector.”
Jim Foote: Oh, thanks for having me.
David Moulton: So, your transition from CISO to main a company utilizing AI to battle most cancers is sort of dramatic. Speak to our viewers about what drove you to make the shift.
Jim Foote: Yeah, you understand, the fact is that we have all been affected by most cancers in a method or one other and most of us bear in mind precisely the place we have been and what we have been doing once we heard that phrase for the primary time. And for me, it was October nineteenth, 10 within the morning when my telephone rang and I heard these phrases on the different finish of the telephone, “most cancers.” And as a lot as I wished them to be about me, they weren’t, they have been about my son Trey. Immediately I used to be thrust into that world of most cancers, once more, very like, you understand, as a CISO when the telephone rings and unexpectedly you discover out you are below assault, and we went into assault mode. And we began making an attempt to resolve this drawback, and like each different affected person we thought we have been going to beat it. After 8 months of grueling chemotherapy, you understand, the docs got here again and mentioned, you understand, your son’s most cancers has returned after which they requested me what I wished to do subsequent. And I used to be stunned as a result of I am not a health care provider. I am a CISO, and however I knew it was a solvable drawback, and so I did the analysis, clearly I could not remedy this drawback in time to avoid wasting my son, however I knew it was a solvable drawback and that is actually why we began the corporate.
David Moulton: And earlier than I get into speaking to you about that transition from CISO to CEO, I sat down and I will say learn your organization’s article that you simply had in April in “Nature” journal. And the explanation I say learn is I may need had some-some help from a GPT to unpack it. It is a bit-a bit deep for a easy man like me, however your article discusses the feasibility and medical influence of what is referred to as “practical precision drugs,” so FPM in treating pediatric sufferers which have relapsed or have refractory cancers. So, are you able to discuss to our viewers a bit bit about what practical precision drugs is and in easy phrases and the way that differs from conventional most cancers therapies?
Jim Foote: Yeah, so what practical precision drugs principally means is, in treating a affected person with most cancers, the entire information and the remedy protocol relies on the person; it is primarily based on you. So, David let me provide you with an instance of how most cancers is handled right now for probably the most half. It is referred to as “the usual of care.” And what it is actually primarily based on is when you take a look at you and I, you understand, we’re completely different ages, we’re completely different nationalities, but when we obtained the identical most cancers we might be handled nearly precisely the identical. It is a recipe e-book; it is referred to as “The Customary of Care.” And it might fluctuate a bit bit primarily based on our age and our weight, but-but the remedy plan can be nearly precisely the identical; the identical medication, the identical regiment, the identical. However take a look at us. We’re utterly completely different individuals; we’re biologically completely different. We glance completely different and we’re biologically completely different. And what practical precision drugs does is it says, let’s take and deal with you primarily based on you, your biology and create an individualized plan versus a plan primarily based on a complete bunch of those that hopefully appear to be me.
David Moulton: So, I am instantly drawn to this concept that in safety we could have a playbook, however primarily based on our menace intel, our surroundings that we’re defending the place a very powerful information or asset for the enterprise is we might shift that playbook and also you may begin with one thing that is an ordinary of care, however you optimize in the direction of what you are making an attempt to guard. However you are telling me that, for probably the most half, you go in and so they go “How outdated are you? How a lot do you weigh?” And dial up and down a few variables fairly than say, customise that playbook particularly for me,” is that proper?
Jim Foote: Sure. Yeah, that is right. So, you understand, once more in cybersecurity we have now run books, proper? We’ve got run books for each situation.
David Moulton: Yeah.
Jim Foote: Nevertheless it’s only a generalized guideline. You’ve gotten to have the ability to, you understand, in incident response, you may have to have the ability to pivot primarily based on the menace. And most cancers, once more, they follow the usual of care which is they do not usually deviate from the playbook. After which when, you understand, what that leads to in America in 2024, 1 in 3 most cancers sufferers will nonetheless die. And-and once more, whereas we are able to transfer the needle by altering the playbook over time with heaps and much and many individuals, there hasn’t been actually any, you understand, quantum leap ahead in the usual of care.
David Moulton: So, you’ve got talked about that you simply see a correlation between how cyber criminals and cancers behave, and also you mentioned that your expertise as a cyber-defender knowledgeable your considering within the battle in opposition to most cancers. Are you able to discuss a bit bit extra about that strategy? I do know you’ve got touched on it, however I need to go a bit deeper.
Jim Foote: When you consider the parallels, you understand, you consider the traits of a cyber-attack or a cybercriminal, they need to evade detection. Typically instances they’re inside your community for weeks or months; you do not even understand it, as a result of they need to evade detection. They continuously evolve and need to traverse by your community and actually make their methods to the crown jewels. And so they’ll take every little thing from you. While you distinction that to most cancers, it is precisely the identical approach. It frequently evolves, it needs to evade detection, and it’ll take every little thing from you at the-in the top.
David Moulton: Within the examine, it talked about that you simply supplied an actionable remedy possibility inside a clinically related timeframe. Are you able to discuss to the viewers a bit bit what meaning for sufferers and their households, and the way may this influence their expertise with most cancers remedy?
Jim Foote: Yeah, so we all know statistically that for every single day or for each 30 days you delay most cancers remedy, you are mortality goes up by 10%. What clinically actionable means is that we can-we can take a biopsy, we are able to return outcomes that may truly profit the affected person and we are able to do this in lower than 10 days, and so that is what’s thought of a clinically actionable timeframe; to have the ability to alter that customary of care primarily based on steerage that in data that our instrument offers.
David Moulton: So, velocity is all the time the final word characteristic in conversations in safety. I feel what I am listening to is that velocity is the final word characteristic in most cancers care.
Jim Foote: Sure. Pace is, you understand, the one factor that you could’t get extra of is time. And, you understand, and what’s fascinating David is, you understand, once more having been on the affected person’s facet and now having to ship a expertise like this into the trade, I perceive each halves. You understand, if you’re a affected person otherwise you’re a mum or dad and all you possibly can see is that clock ticking and all you possibly can take into consideration is that most cancers quickly dividing, quickly rising, doubtlessly metastasizing and circulating throughout the physique, and also you need to assault it with every little thing that you have, you understand, think about being in the course of a cyber-incident and having to attend 10 days for Palo Alto’s crew to ship some forensics data or to ship an EDR instrument that will assist them higher include the scenario. That is the identical mentality you need to have if you’re preventing most cancers. It is obtained to be that sense of urgency, however extra importantly, that sense of urgency what if the medical efficacy that provides you with the precision that you want to finally battle this pho. [ Music ]
David Moulton: So Jim, you’ve got obtained this in depth background in cybersecurity and that is influenced your strategy to main this AI-driven biotechnology firm. Are there any specific ideas or practices out of your IT safety days that you simply discover notably precious in your present position because the CEO?
Jim Foote: A CISO is all the time on the lookout for we’re problem-solvers, you understand, and if we do our jobs completely, no person is aware of we exist. My objective right here, is main this firm, is to assemble the best crew to deliver the best expertise collectively and to have the ability to remedy this drawback of most cancers in a approach that is going to profit each affected person whose most cancers has returned. A superb CISO isn’t the neatest one within the room, however they carry the best individuals with the best expertise and the best expertise collectively to resolve a few of these complicated issues, and that is actually been my mindset, is to essentially, you understand, deliver the most effective in biology and the most effective in expertise and the most effective in Synthetic Intelligence and let’s deliver us altogether and remedy this drawback.
David Moulton: As you made your shift from main safety to main an organization, who did you lean on for help?
Jim Foote: You understand, that is an important query. There’s quite a few areas, once more, you understand, you consider as a CISO, you, you understand, you progress into a brand new firm; what do you need to do? It’s a must to perceive panorama shortly. It’s a must to perceive the weaknesses. It’s a must to perceive the strengths. After which you need to, you understand, attempt to assemble a crew and assault an issue. We have constructed an incredible board of advisors which might be made up of medical docs; insurance coverage executives; serial entrepreneurs; those that have taken, you understand, the top of our board of advisors truly took Cambridge expertise partnership, once more, one other tech firm and grew it to a multibillion greenback firm earlier than they exited. And so, once I entered this world I noticed that I wanted, once more, to encompass myself with specialists. I’ve by no means began a most cancers firm earlier than, however I wanted specialists within the medical trade, within the insurance coverage trade, in prescription drugs, and in startups, as a result of finally, you understand, there are such a lot of gatekeepers to usher in a expertise like ours into the trade that I had to-I needed to make it possible for I noticed each facet and will anticipate any resistance that we might have in bringing one thing like this to market. You understand, in the long run, the most important distinction between what I did as a safety officer and what I am doing now’s, is these selections are actually life and loss of life. If we make a mistake someone may doubtlessly not reply correctly to their most cancers remedy. You understand, as a safety officer, you understand, finally the destiny of firms, you understand, are at hand and when you’ve got bodily safety as a part of your duty which we did at ADP, you understand, sure you’re defending individuals’s lives, however in my profession as a safety officer, no person died. And that is I feel the most important distinction right here is, you need to perceive you are actually working with individuals’s lives; these are mothers and dads and husbands and youngsters and, you understand, we by no means need to lose sight. It is greater than only a, you understand, a clump of cells that sit in a Petri dish that we’re testing medication on.
David Moulton: Jim, you’ve got talked about what seems like an unimaginable lineup in your board of advisors. These are the parents that may mentor and advise you, and I am curious, how their recommendation has formed your strategy to management on this new subject?
Jim Foote: They’ve actually given me, you understand, views from their particular person lenses that they appear by in order that, you understand, once more, it is all about data, distilling it shortly as a way to make good selections that may completely change or form the course of the corporate. And so, by having that, you understand, that various board from a number of facets of trade, they actually have helped me, you understand, form and information the technique of how we are able to speed up the corporate and the way we are able to do it appropriately. You understand, one of many issues that may be a deterrent, imagine it or not, and it is truly a deterrent in cybersecurity, is there are all types of firms on the market that make false claims. You understand, I imply what number of firms on the market that say, you understand, when you purchase this widget you may by no means have a cyber-breech. You understand, after which and, once more, Palo Alto fights that every single day, proper? There isn’t a proof to help these claims, however there’s plenty of noise in that channel, and it is the identical factor with, you understand, most cancers remedy and that is the place it does truly a reasonably large disservice, is there’s plenty of firms on the market which might be saying, you understand, we have got the treatment for most cancers or, you understand; there was one story and, once more, that is the stuff that breaks my coronary heart, you understand, an osteosarcoma affected person worksheet shopping for mangosteeen juice at a 100 {dollars} a bottle and he was ingesting a bottle a day, as a result of someone mentioned it is stuffed with antioxidants, it is magical juice from the rain forest and it’ll treatment your most cancers. And he was spending that cash and he finally died from most cancers.
David Moulton: Yeah.
Jim Foote: And so, you understand, what our board of advisors has actually helped information us in, is to learn how to separate ourselves from that noise, you understand, and once more, that is why it was produce the proof, get printed in a prime tier journal, after which finally that is the place, you understand, you rise above the noise as a result of now you may have the proof and it is independently validated and it is printed by a prime tier journal and that is, you understand, once more, that is the way you separate your self from the noise and fortuitously that, you understand, once more, that is a part of the steerage that this advisory crew that we have has actually helped us, you understand, take these steps in order that we don’t-that we do not get too far out in entrance of ourselves and to essentially do issues in a sequenced approach to assist us all the time keep, you understand, above the noise; if that is smart.
David Moulton: It does. I feel having {that a} stage of ardour and concentrate on what you are doing drives you after which.
Jim Foote: Proper.
David Moulton: You need to exit and inform the world about it, however it’s useful to pause and to come back again and say, “Are we certain?” “Did we validate?” And, can we get someone else to come back in and try the work we have achieved and make it possible for our bias or pleasure is value being enthusiastic about? And whether it is, then that amplifies you and accelerates you fairly than turning into the, you understand, the juice fraudster that is on the market.
Jim Foote: That is proper.
David Moulton: Possibly believing.
Jim Foote: Promoting snake oil.
David Moulton: Yeah, believing that it is helpful, however in actuality it is not or fraudulently promoting it, you understand, since you’re coldhearted-coldhearted particular person. What recommendation would you give to IT leaders which might be contemplating an analogous shift? You understand, possibly they need to transfer to a special trade or right into a management position; how ought to they strategy that and navigate it?
Jim Foote: You understand, one of many issues and, once more, you understand David you talked-you touched a bit bit on it; mentorship is extremely necessary in each stroll of our life. We should be giving again as mentors, however we additionally need to encompass ourselves with actually good mentors. I’d, you understand, the recommendation that I’d give any-any IT skilled, any safety skilled, any-anybody on the market, is do not let anyone let you know there’s something you possibly can’t do. Fixing issues is fixing issues and it would not matter if, you understand; I’ve a Ph.D. in microbiology, which I don’t, but it surely’s about, you understand, surrounding your self with the best crew and fixing issues. After which I feel the third piece of recommendation that I’d give everyone is, each time you step as much as the plate, swing for the fences. Chances are you’ll not all the time hit a homerun, however it is best to anticipate to hit a homerun each time you step as much as the plate. And, you understand, fairly frankly, that is how I obtained my board of advisors. You understand, I had a chance to fulfill Invoice Seibel who’s a serial entrepreneur, an creator, once more, Group Cambridge Expertise partnership and once I noticed that I had a chance to fulfill with him, I swung for the fences. And fortuitously for me, you understand, he was enthusiastic about what we’re doing and, you understand, and opened up each facet of his expertise to assist us alongside. And I feel the third factor that or the fourth factor that I’d-that I’d share is, do not be afraid of failure. And I hate the phrase “failure,” but it surely’s when you’re, you understand, if you’re not failing, you are not pushing the boundaries of your personal skills within the limits of expertise. So, you-if you are going to fail, fail ahead. You understand, once more, it is like an incidence response course of; there’s all the time a retrospective, proper?
David Moulton: Proper.
Jim Foote: And it is the identical factor, it is you understand when you attempt one thing and it did not work, do the retrospective and comeback and do it once more in another way. Study from that and push the boundaries of your expertise and your personal skills to advance these firms and you are able to do wonderful issues and you are able to do something that you simply need to do. [ Music ]
David Moulton: Jim, your organization makes use of AI to match sufferers with efficient therapies and broadly, AI’s enjoying an even bigger and larger position in so many industries. As a CEO and former CISO, I am curious the way you see the position of cybersecurity evolving within the AI period?
Jim Foote: Sure, I imply it, you understand, once more, AI is-it is not the panacea, however it’s the skill to look at huge quantities of data shortly.
David Moulton: Proper.
Jim Foote: And correlate it in a approach and current it again to a human that finally might help us make higher selections quicker, you understand? You understand, you talked about, you understand, taking the “Nature” drugs article and operating it by ChatGPT and also you had a confidence issue, proper? You understand, AI will enable us to, you understand, look at petabytes of data shortly, and do this correlation, however finally, you understand, it is the particular person behind that information that finally has to make the choice and generally that call relies on information. I imply, you understand, once I take a look at how I made a few of my selections on as a CISO, they have been both primarily based on information, primarily based on, you understand, prior priority, or primarily based on, and that is my least favorable one, however my intestine tells me that is the place we obtained to go, proper?
David Moulton: Yep.
Jim Foote: And so, I feel data-I feel AI will assist remodel all industries together with the medical trade, as a result of it helps us synthesize mass quantities of knowledge that helps help, you understand, higher decision-making quicker.
David Moulton: That is actually encouraging Jim. So, let’s go forward and wrap up right here; what’s a very powerful factor someone ought to bear in mind from this dialog?
Jim Foote: You understand, a few issues; one, you understand, my hope is to raised inform individuals about most cancers and the way most cancers is being handled, as a result of till you enter into that world, you actually do not realize that this trade is the trade that is the following one prepared for digital transformation, however we have now to do it safely and we have now to do it with proof. So, I’d say the, you understand, be told as a result of your physician is only a human similar to you and I, and so, you understand, play an energetic position in your well being care working collaboratively together with your physician. I’d say to an IT or safety skilled, problem-solving is problem-solving. All of us remedy complicated issues. Do not limit-don’t restrict the, you understand, your view of fixing a posh drawback even one thing like most cancers, since you do not feel like you may have the expertise or the background. Chances are you’ll not, however you know the way to resolve issues and encompass your self with good individuals who praise you and might help you remedy issues. And I feel the third is, is do not restrict your self primarily based on worry. Each time you step as much as the plate, swing for the fences, you are able to doing something that you simply put your thoughts to. I imply, I take a look at myself and I am like, you understand, 15 years in the past I did not know something about most cancers and now I am, you understand, main an organization fortuitously that is stuffed with specialists that know loads about most cancers. So, you understand, I sort of say I am the poster little one for “You are able to do something” if, you understand, if, you understand, an outdated CISO like me may assist, you understand, deliver this subsequent era of most cancers remedy into the trade that is prepared for disruption, anyone is able to doing something. And I feel the very last thing is, constantly study, constantly study. You have to proceed to put-push the boundaries of expertise and the boundaries of your personal skills and the one approach you are able to do each is be a continuing scholar.
David Moulton: Jim, rather well put. Thanks a lot for approaching “Risk Vector” right now, and speaking to us about your journey and the work that you simply’re main. I actually-I’ve discovered fairly a bit and I feel it is a actually fascinating leap from safety to safe AR to CEO that you have made and are making an unimaginable influence.
Jim Foote: Nicely, thanks. I respect it and, you understand, hopefully it is, you understand, it is impressed that subsequent era. [ Music ]
David Moulton: I discovered Jim’s transition from CISO to CEO of a biotech firm notably compelling, as a result of it illustrates the profound influence private experiences can have on our skilled paths. His shift was sparked by a really private disaster, his son’s most cancers analysis which drove him to hunt out and implement more practical most cancers therapies utilizing AI. This transfer, underscores the potential for private motivations to catalyze important profession modifications and improvements. And it highlights how expertise from one subject like cybersecurity will be transferrable and extremely efficient in different fields. By making use of his background in safety to the medical subject, Jim’s story jogs my memory of the teachings discovered in David Epstein’s e-book “Vary.” Within the e-book Epstein makes the case for generalism, a broad competence in lots of areas fairly than an excessive grasp in a single. Jim’s profession began in expertise and IT, dove deep into safety after which pivoted to a task as a biotech CEO with First Ascent. Simply as Epstein argues that various experiences contribute to innovation and problem-solving, Jim’s profession pivot illustrates how cross-disciplinary approaches can result in groundbreaking advances in fields as important as most cancers analysis and remedy. That is it for “Risk Vector” this week. I need to thank our government producer, Michael Heller, our content material and manufacturing groups, which incorporates Sheila Droski, Tanya Wilkins, and Danny Milrad. I edit the present, and Elliott Peltzman mixes the audio. We’ll be again in two weeks. Till then, keep safe, keep vigilant. Goodbye for now. [ Music ]
