Industry Insights

AI Won't Fix Bad Cybersecurity: Why Federal Agencies Must Get Back to Basics

Written by Fed Gov Today | Oct 8, 2026, 4:46:15 PM

Original Broadcast Date: 10/11/2026

Sponsored by Commvault & Carahsoft

Richard Breakiron, Senior Strategist for Programs and Cybersecurity for the Federal Sector at Commvault, says strong cyber hygiene, data management and workforce readiness remain essential as organizations introduce increasingly powerful AI capabilities.

During an interview on Fed Gov Today, Breakiron reflects on conversations at the Billington CyberSecurity Summit, where military and industry leaders discuss how emerging technologies are changing cybersecurity.

While conferences often highlight the newest innovations, Breakiron says one message stands out: agencies cannot afford to overlook the foundational practices that make those innovations effective.

He points specifically to comments from Lt. Gen. Paul Stanton, director of the Defense Information Systems Agency, who emphasizes the importance of maintaining basic cyber hygiene and data hygiene.

For Breakiron, that message reinforces a principle he frequently discusses: successful technology adoption depends on people, processes and technology working together.

Technology is an important component, but it cannot compensate for an organization that lacks the skills or operational processes necessary to use it effectively.

Breakiron says agencies need professionals who understand the technologies they operate and processes that allow organizations to scale their capabilities.

Without those foundational elements, even the most advanced AI tools may struggle to deliver their intended benefits.

He compares the situation to putting someone behind the wheel of a high-performance vehicle.

The car may be capable of incredible speed, but without a skilled driver, that speed can become dangerous.

The same principle applies to artificial intelligence.

AI can dramatically accelerate how organizations process information and perform tasks, but Breakiron argues that speed alone does not guarantee better outcomes.

Instead, organizations need the expertise and operational discipline to turn that speed into something useful.

That distinction becomes especially important when examining how AI supports decision-making.

Breakiron points to the military's OODA loop, which stands for observe, orient, decide and act.

The framework describes how organizations gather information, interpret their environment, make decisions and take action.

He says AI can help accelerate several parts of that process.

During the observation phase, AI allows organizations to process large volumes of information at greater speed and scale.

During the orientation phase, the technology can help users learn from that information and place it into a broader operational context.

But those capabilities are only part of the equation.

The ultimate goal is to support better decisions and meaningful action.

Breakiron summarizes that philosophy with a phrase that captures his perspective on the technology.

"AI is less about artificial intelligence as much as actionable insight," he says.

That emphasis on actionable insight also reinforces the importance of data.

Breakiron explains that AI depends on data throughout the decision-making process. Agencies need to understand how information moves through their operations and how it supports each stage of decision-making.

He says Commvault is emphasizing a more unified approach across that process, with data serving as a foundational component.

Still, Breakiron stresses that technology cannot replace human understanding.

He interprets Stanton's emphasis on cybersecurity fundamentals as a reminder that innovation ultimately depends on people.

Cybersecurity professionals operate in environments that continually change, requiring them to maintain their skills and remain prepared for emerging challenges.

Breakiron illustrates that relationship using another familiar example: driving with GPS navigation and lane-assistance technology.

Those systems can help drivers navigate and operate their vehicles, but they do not eliminate the need for someone who understands how to drive safely.

Likewise, advanced cybersecurity tools can assist federal employees without removing their responsibility to understand the systems they manage.

As agencies introduce more powerful technology into their operations, Breakiron says they must also remain operationally ready and resilient.

That means maintaining the foundational capabilities needed to respond effectively when circumstances change.

The conversation also returns to the relationship between technology and mission outcomes.

Breakiron agrees that an agency's mission must remain the driving force behind its technology investments.

Without a clear understanding of what an organization is trying to accomplish, he says it becomes difficult to achieve the greatest value from major technology initiatives.

That perspective ties together his broader message about cybersecurity and artificial intelligence.

Federal agencies have opportunities to use AI to process information faster, improve decision-making and strengthen operations. But realizing those benefits requires more than simply acquiring new tools.

Organizations must also invest in the people who operate those systems, establish processes that support their use and maintain the data practices that make the technology effective.

For Breakiron, the path toward more advanced cybersecurity begins with ensuring those fundamentals are in place.