BLodgic’s Brennan Lodge on Segregation of Duties Between AI and Auditors
Michael Novinson (MichaelNovinson) •
August 12, 2026
Brennan Lodge, founder and CEO, BLodgic
Artificial intelligence agents can reduce the manual burden of cybersecurity compliance, but organizations still need human judgment to validate evidence and authorize outcomes, said Brennan Lodge, founder and CEO of BLodgic.
See Also: Open-Weight Model Antares Delivers Stronger Code Security
Lodge said AI can analyze screenshots, policy documents and security tool evidence, then map that material to controls under frameworks such as NIST RMF, ISO 42001 and CMMC. The same system, however, shouldn’t perform the work, validate its output and certify compliance without independent review. “There still needs to be the human,” Lodge said.
That oversight becomes even more important in regulated, sensitive and air-gapped environments, where agents require strict boundaries, logging and continuous observation. “You can’t just like set it and forget it. You’ve got to review the logs. You’ve got to check out what it’s doing and observe,” Lodge said.
In this video interview with ISMG at Black Hat USA 2026, Lodge also discussed:
Why specialized agents can improve validation without replacing human sign-off;
Why agentic systems’ non-deterministic nature demands more scrutiny than traditional model testing;
How preparation, validation and authorization must stay distinct steps in the audit process.
Lodge is a cybersecurity executive, data scientist, professor and researcher focused on applying AI to security operations, compliance, audit readiness and threat defense. He is the creator of Audit CADDIE, an AI-powered governance, risk and compliance platform.