“most organizations don’t know how much data they have, where it all sits, and if it’s even being monitored or properly secured.” — Tu McLendon, Channel Senior Systems Engineer U.S. — Federal at Nutanix
Federal Cybersecurity Executive Summit in Washington, D.C., early April
In early April, federal cybersecurity leaders assembled in Washington, D.C., for the Federal Cybersecurity Executive Summit hosted by Optiv + Clearshark. The convening centered on a practical, immediate problem: how to operationalize artificial intelligence across agencies while moving and protecting enormous amounts of sensitive data through cloud, edge and on‑premises environments. The discussion, as reported afterward by Tu McLendon of Nutanix, boiled down to a handful of recurring operational themes rather than a search for a single technological silver bullet.
Clarity Before Modernization
Agencies, McLendon said, face a problem that is less about policy and more about execution. Data is dispersed across multiple locations — cloud environments, edge locations and on‑premise data centers — and the majority of federal agencies lack a clear, auditable inventory of what they hold and how it is being protected. According to the report, agencies that are making progress are those that prioritize accurate data discovery and classification and that establish clear guidance and operational procedures around what they do with their data, how they manage it, and how they are able to have visibility and audit trails.
Getting clear on what exists, where it sits, and whether it is being monitored is presented as a prerequisite for modernization and for any AI deployment that depends on reliable inputs and security controls.
Modernize Without Disruption
Federal leaders described a modernization path that reduces operational risk by avoiding wholesale platform replacements. McLendon explained that agencies can run applications on traditional infrastructure using virtualization and, when ready, modernize without changing the underlying platform. Using a single, unified platform enables support for modern containerized applications alongside legacy virtualized workloads, the summit brief reported, which can eliminate the kinds of disruptions that typically accompany modernization projects and preserve consistent operational procedures and security controls across environments.
The idea advanced at the summit is procedural consistency: keep operational and security practices uniform across legacy and modern workloads so mission‑critical services remain stable while new capabilities are rolled out.
Where AI Delivers Immediate Value
When summit participants spoke of “real‑time visibility” and “machine‑speed operations,” they were describing the ability to process data faster than manual methods can achieve — precisely where AI can provide immediate benefit. McLendon put it succinctly: “AI gives you the ability to do that very quickly instead of a manual process.” The report names concrete use cases where agencies can deploy AI responsibly and reap fast returns: automating data classification, accelerating incident response, and using retrieval‑augmented generation to analyze documentation instantly.
The takeaway at the summit was not to await perfection. Agencies should focus AI efforts where speed and efficiency are clearly better than manual alternatives, deploying capabilities that enhance visibility and response while the broader infrastructure and governance work continues.
Collaboration Over Competition
One of the clearest signals from the summit was behavioral: federal leaders, McLendon said, are not scouting for a single vendor to solve all problems. “It wasn’t about competition against different vendors in the industry … it was a collective collaboration,” he observed. The conversations emphasized that security must be integrated into the design of an organization’s infrastructure, applications and data, and that it requires a layered approach — defense in depth — rather than relying on one product or provider.
That framing positions vendors and agencies as partners in an adaptive process: security and modernization evolve together when parties collaborate openly and are willing to adjust as capabilities and requirements change.
What this means for agencies, vendors, and security teams
- Agencies: Prioritize baseline discovery and classification so modernization and AI projects rest on a verifiable inventory and defined operational procedures; treat visibility and auditability as prerequisites.
- Vendors: Expect to participate as collaborative partners rather than single‑solution vendors; support unified platforms that bridge legacy virtualization and containerized modern workloads and integrate security into design.
- Security teams: Focus on layered defenses and consistent controls across environments, and accelerate use of AI for high‑value, machine‑speed tasks such as classification and incident response.
The summit’s message was practical and iterative: start by knowing what you have, avoid disruptive platform swaps, let AI do the tasks it does best, and work together. The hard work is not a single technical fix but the steady choreography of discovery, platform choice, governance and cross‑party collaboration.
