Palo Alto Networks CEO Nikesh Arora says roughly $1 trillion of cybersecurity infrastructure was built for a pre-AI world. While that claim may sound like a vendor promoting a new spending cycle, similar warnings are coming from CrowdStrike, Microsoft, OpenAI, Anthropic, and others. For boards, the more important question is not whether the number is correct, but whether the organization's governance, security, and risk frameworks are keeping pace with its AI ambitions.