KBKAST – Episode Summary
From The SimSpace Summit 2026 – KB On The Go | Peter Lee and Ernie Ferraresso (Part 1)
March 5, 2026
Overview
This episode of KBKAST, hosted by KBI.Media from the SimSpace Summit 2026 in Orlando, Florida, explores the true meaning of cyber readiness, the evolving threat landscape accelerated by AI, and innovative approaches to cybersecurity both organizationally and regionally. Host "KB" speaks in-depth with Peter Lee (CEO of SimSpace and former U.S. government/military cybersecurity leader) and Ernie Ferraresso (Senior Director at Cyber Florida), about moving cybersecurity training, validation, and culture beyond box-ticking and into performance-tested, mission-driven resilience. The conversation spans the shift in mindset prompted by AI, team training vs. individual skills, the rise of Florida as a cyber and tech powerhouse, and the importance of information sharing and community in cyber.
Main Segments
I. Proving Cyber Readiness in the Age of AI (Peter Lee, SimSpace)
Theme:
The central premise is that cybersecurity preparedness must be proven under real conditions, not just asserted on paper—a notion becoming more urgent as AI rapidly changes the threat landscape.
Key Discussion Points & Insights
Readiness: Claim vs. Proof (01:22–04:06)
- “In cybersecurity, confidence without evidence is just hope.” – Peter Lee [01:35]
- Readiness and preparedness must be validated under realistic, adversarial situations (e.g., via cyber ranges).
- True cyber readiness is proven, not claimed by certifications or checklists.
- The perception of preparedness varies by organizational level; senior leaders are more open to transformative change than lower levels.
Evolving Definitions & Continuous Adaptability (04:06–07:02)
- The rise of AI has accelerated attack complexity and speed, outpacing traditional training methods.
- “Training without testing leaves blind spots, and testing without training creates snapshots like a doctor’s visit doesn’t mean you’re healthy now.” – Peter Lee [04:37]
- Preparedness is a moving target—what sufficed last year may not suffice today.
- Cyber ranges and continuous mission rehearsal are key to closing the gap.
Breaking the Culture Gap (07:02–09:30)
- Military vs. Corporate Culture: Mission rehearsal is ingrained in defense but less so in business; the concept must shift from discrete missions to a “continuous culture” of resilience.
- “The mission never ends...it’s a continuous threat landscape.” – Peter Lee [07:02]
- Emphasis on prevention over cure, as adversarial dwell time shrinks.
Human + AI: The Next Evolution (09:30–12:39)
- The biggest gap: seeing humans and AI as complementary, not substitutive.
- Both must be performance tested and held to equal standards, ideally together in realistic simulations.
Building Precision Under Pressure (10:23–12:39)
- High-investment in rehearsal and simulation creates “muscle memory” so that teams, tools, and AI can maintain composure under real attack.
- “You don’t want to learn that in production. You want to be able to fail well in advance.” – Peter Lee [10:47]
- Early adoption: AI is automating “signal from the noise,” but critical decisions remain human (for now).
Asymmetry & Rising Stakes (12:39–13:42)
- Defenders are stretched thin: “If you’re a fan of the hit movie ‘Everything Everywhere All at Once’—that’s what defenders have to do... Defenders have to defend everywhere, continuously.” – Peter Lee [13:35]
- Attack surface and tool failure rates are rising, making realism in testing crucial.
Standards for AI (13:35–15:25)
- Trust, governance, vulnerabilities: AI must be governed like human operators and treated as both a resource and an attack surface.
- “Introducing AI ... also requires that we understand its vulnerabilities. AI itself is another attack surface.” – Peter Lee [13:42]
Proving Effectiveness & Incentives (15:25–17:45)
- “We can’t reward activity over outcomes.” [15:25]
- Testing and training must occur together, in production-grade conditions, to foster true confidence (not just compliance).
- Individual skills and certifications are necessary minimums, but performance under pressure in teams (including AI) is the goal.
Certifications & Real-World Security (17:45–19:01)
- Certifications provide a baseline, but “being individually trained ... has absolutely no bearing to how you’ll perform under pressure in an actual team environment.” [16:26]
Closing Takeaways from Peter Lee (19:06)
- The rallying cry: “Humans plus AI.” The future is now, and organizations must invest in joint team training, tooling, and production-grade testing to be truly prepared.
II. Cyber as a Statewide Mission – Florida’s Approach (Ernie Ferraresso, Cyber Florida)
Theme:
Florida is reframing itself from “holiday state” stereotypes to a cyber-resilient, innovation-driven tech powerhouse, emphasizing university-to-community pipelines, a collaborative ecosystem, and strong practical training.
Key Discussion Points & Insights
Florida’s Unique Approach (19:39–22:00)
- Florida’s size and diversity require a flexible, decentralized approach; Cyber Florida, though state-funded and university-housed, acts as a bridge between government, education, and community.
- Provides experiential learning—students deliver real services to communities, closing the skills gap while giving back actionable insights to the state.
Talent Magnet & Ecosystem (21:50–23:18)
- A tech/talent influx driven by access to high-quality education, supportive state investment, and quality of life.
- “It's this thing that we're in this together... It’s a true ecosystem... they want each other to succeed.” – Ernie Ferraresso [22:02]
Statewide vs. City Tech Growth (23:18–24:59)
- Florida’s tech boom is occurring at the state level—multiple major metro areas are rising together.
- “It’s not just a valley, it’s a whole state... the giant is awakening.” – Ernie Ferraresso [23:36–24:26]
Changing the Narrative (24:26–28:24)
- Overcoming “Florida man, alligators, oranges” stereotypes via persistent, generational action—“the best marketing in the world is word of mouth.”
- “We're building the solid foundations... those infrastructure developments, it's a strong higher education system, it's a strong technical college system.” [27:22]
- Success growing homegrown unicorns (e.g., KnowBe4, ConnectWise) proves durability.
Florida’s Competitive Edge & Durability (28:24–30:28)
- Built for long-term endurance, not a “flash in the pan.”
- Tech sector coexists with tourism seamlessly.
Cyber Forwardness and “Last Mile” Engagement (31:04–34:48)
- Success attributed to getting resources into local hands, backed by flexible, non-bureaucratic structures.
- “The challenge other states have...is that last mile—how do you get what you need into the hands that need it?” [31:04]
- Cyber ranges are moving from pure training to real incident simulation/testing.
Role Model for the Nation (37:12–38:18)
- Florida’s approach is a model for the rest of the U.S.—offering services for free and helping other states skip “a couple of steps.”
National Cohesion and Challenges (38:18–41:25)
- Full cyber resilience requires information sharing across decentralized U.S. states, with new talent models as AI matures.
- Sharing hampered by legal and regulatory concerns—current incentive structures disincentivize timely intelligence sharing.
- “The incentives are on the regulatory side, not on the information sharing side for the sake of improving.” [41:25]
Overcoming the Cyber Rivalry (45:50–47:55)
- Realistically, each state will retain distinct approaches and maturity, which is a strength (“strength in the diversity”) rather than a weakness in national security posture.
Notable Quotes & Memorable Moments
- “Confidence without evidence is just hope.” – Peter Lee [01:35]
- “Preparedness is something that’s earned and proven...it’s not a series of courses or certifications or a self judgment.” – Peter Lee [02:21]
- “The mission never ends, really—from a commercial perspective, it’s a continuous threat landscape.” – Peter Lee [07:02]
- “If you’re a fan of the hit movie Everything Everywhere All at Once, that’s what defenders have to do... Attackers choose the time and place, and how they’re going to attack. Defenders have to defend everywhere, continuously.” – Peter Lee [13:35]
- “We can’t reward activity over outcomes.” – Peter Lee [15:25]
- “It’s this thing that we’re in this together...a true ecosystem...they want each other to succeed. It’s not cutthroat.” – Ernie Ferraresso [22:02]
- “The giant is awakening... that’s what I believe.” – Ernie Ferraresso [24:26]
- “We're building the solid foundations...a strong higher education system, it's a strong technical college system...” – Ernie Ferraresso [27:22]
- “Even though the services that we provide are free, it often surprises me how hard it is to get people to even engage with a free product... You can lead the horse to water, but you can’t make them drink.” – Ernie Ferraresso [37:19]
- “There’s strength in the diversity. It can be a feature and a bug. It can exist in what is a quantum state of yes and no at the same time.” – Ernie Ferraresso [47:55]
Timestamps for Key Sections
- 01:35 – Peter Lee: “Confidence without evidence is just hope.”
- 04:37 – Peter Lee: Training and testing must go hand in hand.
- 07:02 – Peter Lee: The cultural shift needed for continuous cyber defense.
- 13:35 – Peter Lee: Asymmetry and infinite attack surfaces.
- 15:25 – Peter Lee: Incentivizing outcomes, not activity or training.
- 19:06 – Peter Lee’s main takeaway: “Humans plus AI.”
- 22:02 – Ernie Ferraresso: Florida’s tech ecosystem is collaborative.
- 24:26 – Ernie Ferraresso: “The giant is awakening.”
- 27:22 – Ernie Ferraresso: Foundations for Florida’s durable rise.
- 31:04 – Challenges in “last mile” delivery of cyber resources.
- 37:19 – Florida modeling the way for other states.
- 41:25 – Regulatory vs. information sharing tensions.
- 47:55 – Diversity as a strength in U.S. cyber defense.
Conclusion:
This episode provides unique, strategic-level insights for CISOs, policymakers, and cyber leaders, spotlighting the urgent need for continuous, realistic preparedness—as well as the cultural, team-based, and systemic changes needed to secure organizations in the AI era. Florida emerges as an instructive case study, illustrating how state-level innovation, ecosystem-building, and practical training can shift the entire narrative and effectiveness of cybersecurity at scale.
Both guests stress that the future of cyber resilience is now—and it is forged not by paperwork, but by real-world, pressure-tested collaboration between humans and AI.
