Episode 100: AI, Deepfakes, and Cybersecurity: Why Protection Must Come First

Melissa Mulholland04/10/2025

In an era where AI and deepfakes are reshaping the digital landscape, cybersecurity is no longer just an afterthought — it’s a necessity. In this #shifthappens episode, Melissa Mulholland, CEO of Crayon, explores why prioritizing security is essential for innovation and not a barrier.

Throughout the discussion, she shares strategic insights on how organizations can leverage technology to stay ahead of evolving cyberthreats. She also provides practical guidelines for prioritizing cybersecurity to thrive in a world of rapid change.

Leveraging Technology for Efficiency and Innovation

Technology is fueled by constant evolution, and Melissa stresses the need to stay open-minded and driven. “Change is constant in this industry,” she notes. For businesses and individuals alike, adaptability is essential to keep pace with rapid advancements. Melissa urges organizations to build a culture of curiosity and openness to innovation – from AI and cloud to cybersecurity – because long-term success depends on the ability to evolve.

But innovation isn’t just about what’s new; it’s about making things work better. Melissa points to her experience with Norway’s house-buying process as a standout example: a seamless, app-based experience with secure digital transactions. In contrast, the U.S. process remains slow and paper-heavy.

The takeaway? Embracing modern tech improves efficiency, elevates customer experiences, and strengthens security. Companies that prioritize smart, tech-driven processes gain a sharper edge and smoother operations.

Protecting Progress: Cybersecurity as a Foundation for Innovation

Security is not an afterthought; it is the bedrock upon which technological advancements stand. Melissa emphasizes that tools like AI can turn into vulnerabilities if not properly secured.

She recalls a moment from Crayon’s rollout of Copilot: “I had this flash of doubt. Did we secure this properly?” As CEO of a public company, that question is personal. Melissa’s answer? Always lead with security. “You can’t dive into AI or cloud without making sure your data and processes are safe first,” she adds.

“People often see security as a roadblock, but for me, it’s the enabler.”

Without that foundation, innovation becomes a risk.

The Global Landscape of AI and Cloud Adoption

Melissa highlights key regional differences in the adoption of AI and cloud computing. “In the Nordics and parts of Europe, they’re way ahead on security and digitization,” she says. In contrast, she notes that many U.S. companies still hesitate due to fears around privacy and exposure. “There’s a fear here (in the US) that online means exposed, but over there, they’ve cracked the code: secure and digital go hand in hand.”

She credits regulatory frameworks like the EU AI Act and GDPR for pushing Europe forward. These rules, while strict, encourage strong security practices and responsible adoption of emerging tech. In the U.S., regulatory uncertainty and skepticism often slow progress.

Melissa encourages companies to view compliance not as a hurdle but as a launchpad for innovation. “Regulations can actually help us innovate smarter,” she says. By aligning strategy with ethical, transparent practices, organizations can build trust and set themselves up for sustainable success in an AI-driven future.

Cybersecurity Best Practices and Managed Services

One of the most practical takeaways from the discussion is Crayon’s approach to cybersecurity. Melissa outlines how Crayon weaves security into everything they do internally and with customers. The company offers end-to-end protection through managed services that are proactive rather than reactive.

Key aspects of Crayon’s cybersecurity strategy include:

• Conducting customer security assessments to identify vulnerabilities.

• Offering posture-managed services to provide continuous threat monitoring.

• Partnering with leading security providers, such as Appian, to enhance protection mechanisms.

These proactive measures demonstrate how businesses can safeguard their digital environments while focusing on growth and innovation. Security should never be a reactive process; instead, it must be ingrained in the company’s overall technological strategy.

The Importance of Cybersecurity Training and Awareness

"Even the most advanced security systems cannot fully protect an organization if employees are not adequately trained," Melissa shares.

She recounts a striking incident: "I had a deep fake made of me — multiple times. And this one was transacted in a way where an employee thought for a second, this has to be Melissa. Thankfully, we had enough training in place that they alerted someone. But in this case, the company wanted $2 million basically transferred from an account, and it felt real. If we had not educated our workforce, we could have actually faced (a) serious financial fraud."

To combat these evolving threats, Crayon employs a multi-faceted approach to training that organizations can replicate:

• Running phishing simulations to test employee awareness.

• Utilizing engaging training methods, such as storytelling and gamified simulations.

• Fostering a security-first culture where every team member understands their role in protecting company data.

Melissa’s point is clear: tech isn’t enough on its own. Human awareness is your first and best line of defense.

A Customer-Centric Approach to Tech Solutions

Melissa emphasizes that technology should always serve a purpose, aligning with customer needs and business objectives. At Crayon, the focus is on understanding customer pain points through thorough assessments and delivering tailored security solutions.

That same rigor extends to their clients. Melissa describes Crayon’s managed security service, which starts with a deep dive into each customer’s needs: where are they now, what do they want, and what risks do they face? It’s not a one-time fix but a continuous effort, with ongoing monitoring to catch threats early. Clients, she observes, are hungry for this help. “They know they’re vulnerable, and they’re ready to act,” she says. For Melissa, this isn’t just business — it’s a mission to make security accessible and effective for all.

She highlights their partnerships, like with AvePoint and Microsoft, as key to refining their approach that contributes to their global impact. “We’ve built trust by showing we’re in this together,” she notes.

Security as the Foundation for Progress

Melissa’s insights emphasize a fundamental truth: the pace of technological change is relentless, and organizations must adapt to stay competitive. However, innovation without a solid security foundation introduces significant risks. Security must be an integral part of any technological strategy, not an afterthought.

The path to long-term success lies not only in embracing technology but in ensuring that it is safe, responsible, and sustainable. To do so, businesses must focus on the following strategies:

• Turn Security Into Your Competitive Edge: Build a strong security foundation to drive innovation confidently.

• Bridge the Global Security Gap: Adopt global best practices, comply with regulations, and tackle regional security challenges.

• Stay Ahead of Cyberthreats: Invest in ongoing training to equip teams to handle emerging threats.

• Secure AI from Day One: Integrate security with AI to unlock its potential while safeguarding data.

Melissa’s advice is clear: Begin with cybersecurity and build from there. "It’s never too late to start securing your foundation," she stresses. One thing is clear: The future of your business depends on how well you protect it today.

Episode Resources

• #shifthappens Research: AI & Information Management Report

• Melissa Mulholland on LinkedIn

• Dux Raymond Sy on LinkedIn

• GDPR (EU 2016/679)

• EU AI Act (EU 2024/1689)