RSAC 2026 highlighted a growing disconnect between cybersecurity innovation and business enablement. Amid the surge of “AI-powered” solutions, many organizations risk repeating a familiar mistake: prioritizing compliance, complexity, and hype over real-world outcomes.
This blog from EMA’s Ken Buckler explores how security measures—past and present—can unintentionally hinder productivity, leading teams to bypass controls in order to get work done. Drawing a parallel between a simple “pen cap hack” and today’s influx of AI-driven tools, it underscores the dangers of security theater and misaligned priorities. The takeaway is clear: effective cybersecurity should reduce friction, support business velocity, and deliver measurable risk reduction—not add cost and complexity without value.











