AWS re:Invent 2025 - The Next Cyber Frontier: AI, Fans, and Global Platforms (SPF208)

Summary of "The Next Cyber Frontier: AI, Fans, and Global Platforms" (AWS re:Invent 2025)

Speakers and Organizations

• Steve Gman, Chief Information Security Officer at the NBA
• Brian Lozada, Director of Global Media, Entertainment, and Ads Security at Amazon

Global Expansion and Security Challenges

• The NBA has a significant global footprint, with a presence in Shanghai, Hong Kong, Beijing, London, and plans for more global games.
• This global expansion presents new security challenges, including:
  • Ensuring consistent security standards across 30 NBA teams with varying levels of security maturity.
  • Collaborating with third-party venues and infrastructure providers to maintain a secure event ecosystem.
  • Protecting sensitive fan and athlete data collected for personalization and business purposes.

Securing the Fan Experience

• The NBA has migrated its global streaming app to AWS, leveraging the cloud platform's security capabilities.
• Key security priorities include:
  • Maintaining the integrity and availability of live streams, especially with new features like multi-view.
  • Implementing robust data protection and compliance measures (e.g., SOC 2 certification) to safeguard fan and athlete data.
• Collaboration between the NBA's security and product teams is crucial, with a DevSecOps approach to baking security into the development process.

Securing the Media and Entertainment Ecosystem

• Amazon's media and entertainment portfolio includes Prime Video, Audible, Twitch, and other platforms, making it one of the largest media companies globally.
• Security challenges include:
  • Protecting the integrity of live streams and content from threats like DDoS attacks and deep fakes.
  • Enabling new innovative features (e.g., multi-view) while maintaining strong security controls.
  • Collaborating with a diverse set of third-party content creators, studios, and partners, each with varying security maturity.

Leveraging AI and Automation for Security

• Both the NBA and Amazon are exploring the use of AI and automation to enhance their security capabilities, including:
  • Automating vulnerability management and prioritization based on the organization's specific infrastructure and risk profile.
  • Leveraging AI-powered agents and tools to streamline security operations, reduce response times, and enable security-as-a-service for developers.
  • Developing AI-based solutions to detect and mitigate deep fakes and other emerging threats to content integrity.

The Evolving Role of the CISO

• CISOs must adapt to the rapid pace of technological change, including the proliferation of new AI-powered tools and platforms.
• Key skills and mindsets for CISOs include:
  • Effective communication with business leaders to align security with innovation and risk appetite.
  • Embracing a "shift left" approach to integrate security earlier in the development lifecycle.
  • Fostering a culture of adaptability and continuous learning within the security team to keep pace with evolving threats and technologies.

Conclusion

• The media and entertainment industry, exemplified by the NBA and Amazon, faces a constantly evolving landscape of security challenges, from global expansion to emerging AI-powered threats.
• Successful security strategies require close collaboration between security, product, and business teams, as well as the strategic use of AI and automation to enhance visibility, responsiveness, and proactive defense.
• CISOs must adapt their skills and mindsets to effectively navigate this dynamic environment, balancing security, innovation, and business enablement.