Jason Veiock, founder and CEO of Bearing, holds that an enterprise cannot govern AI it cannot see, which is why the governance layer belongs on the system of record employees already work in rather than on each tool they adopt. Veiock’s test for any large organization is arithmetic: if ten percent of a 350,000-person workforce decides to vibe code its own app, the company inherits 35,000 slightly different applications solving the same problem with no common context and no shared controls.
Veiock founded Bearing to digitally transform corporate security through the ServiceNow platform. He spent eight years at GoDaddy as Senior Director of Safety, Security, and Resilience, building and scaling global security and crisis management programs, after serving as a Special Agent with the U.S. Department of State’s Diplomatic Security Service and as a Criminal Investigator for Homeland Security Investigations.
Glenn Gow, The Scaling Executive Coach and host of The Scaling Executive Podcast, identifies Veiock as the rare leader who translates deep tactical field experience into scalable corporate strategy.
This episode is for CEOs deciding whether to let AI adoption spread tool by tool across their organization or consolidate it on one platform before the sprawl hardens into permanent technical debt.
Key Takeaways
- Waiting on AI is a decision about competitors and adversaries, not about internal readiness, and Jason Veiock resolves it by asking whether anyone else in the world is waiting.
- Ungoverned AI adoption at enterprise scale reproduces the app sprawl of 2018 to 2020 at higher speed, which is why Jason Veiock expects large enterprises to consolidate around systems of record that carry both context and governance.
- AI cannot reason usefully about a business without a queryable system of record supplying it context, and Jason Veiock built Bearing on ServiceNow specifically because HR, IT, cybersecurity, and corporate security data already sit on that one platform.
- Security controls fail when they are chosen for size rather than for the threat, and Jason Veiock’s rule from Diplomatic Security is that the wall must match the context: sometimes stronger, sometimes unclimbable, rarely just taller.
- Thirty years of industry context has become an advantage rather than a liability in the LLM era, and Jason Veiock screens for whether candidates actually apply that context by asking them to share their prompt history during the interview.
CEOs Settle the AI Timing Question by Asking Whether Adversaries Are Waiting
Jason Veiock describes Bearing as an AI first company in both development and product, and he reached that position by answering two questions rather than by running a pilot. The first: is AI going anywhere. The second: will today’s version ever be worse than tomorrow’s.
Veiock then adds the geopolitical layer that most enterprise AI debates skip. If a company waits, no rule requires the rest of the world to wait with it, and not everyone else in the world is a friend.
The same logic governs the security side of the question, where Veiock reduces the entire debate to one exchange:
“Well let’s start with do you think the bad guys are using AI?”
When Glenn Gow answered yes, Veiock’s follow-up was direct: then why are you not, to keep up. For a CEO weighing an AI pause on security grounds, Veiock’s framing inverts the risk calculation. The pause does not remove exposure. It removes the capability to answer an adversary who never paused.
Enterprises Prevent AI Sprawl by Consolidating Governance on a System of Record
Jason Veiock treats AI as another technology purchase rather than a category unto itself, and he applies the lesson enterprises already learned once. Between 2018 and 2020, companies built an app for everything and ended up with too many apps. Veiock expects AI to run the identical cycle unless the enterprise decides where governance lives before adoption spreads.
“Do I really need that many apps doing the same thing, going in so many different directions with no governance?”
Veiock’s answer is consolidation around systems of record, and his reasoning has two parts that most AI strategy conversations treat separately.
| Requirement | Why AI fails without it | What the system of record supplies |
| Context | An LLM with no access to company data reasons about a generic business, not this one | A queryable record of what the organization actually knows, which Veiock names as the precondition for using AI effectively |
| Governance | Thousands of independently built applications create no shared controls and no visibility into what any of them touch | One platform where responsible use policy is enforced once rather than negotiated tool by tool |
Bearing is built on ServiceNow for exactly this reason. Veiock points out that HR, IT, and cybersecurity teams already operate there, and Bearing adds corporate security to that common platform. Security follows governance in his model rather than preceding it: the platform establishes governance, and the governance is what makes security enforceable.
Security Leaders Build Stronger Walls Instead of Bigger Walls to Keep the Business Fast
Jason Veiock learned the mission hierarchy on day one as a Diplomatic Security Special Agent: security is not the mission, diplomacy is, and a bigger wall that blocks diplomacy has defeated its own purpose. He applies the same test to corporate security, where the mission is a profitable business.
“I don’t always need a bigger wall. Sometimes I need a stronger wall. Sometimes I need a wall that somebody can’t climb. Sometimes I need a wall that somebody can’t ram through. It all depends on the context and the threat and the environment that I operate in.”
Veiock is explicit that speed is the security objective rather than its casualty:
“I think resilience is an output of agility.”
That inverts the default posture. A security leader who slows the business to reduce risk has traded away the organization’s ability to move past a problem quickly, which Veiock names as the private sector equivalent of pushing through an ambush.
Setting the right velocity requires knowing three things about the organization, and Veiock frames Bearing’s entire product around mapping them:
- Where every asset is
- Where the risks and threats against those assets are
- What the organization’s risk tolerance actually is
Veiock calls the goal a 720-degree view of an organization’s assets and the threats against them. He was a converged security leader in 2017 when physical and cyber teams merged, and he describes that merger as two teams joining rather than full visibility. Full visibility, in his model, comes back to the system of record and the context it holds.
CEOs Hire for AI Fluency by Watching Candidates Work with an LLM Live
Jason Veiock does not ask candidates whether they use AI. He asks them to share their screen and show him their prompts and the conversation they had with their LLM of choice. His standard is daily practice, and his position is that a candidate who is not working with these tools every day will not thrive on his team.
Veiock pairs that standard with a claim that cuts against the assumption that AI favors the young:
“I don’t think there’s ever been you know, a better time to be a 50-year-old with 30 years experience in a sector or an industry or a vertical.”
His reasoning follows the same principle that governs his platform choice. Thirty years in a vertical is a large store of context, and context is what makes an LLM useful. Veiock credits his own Jesuit university education, with its required theology and philosophy, for teaching him how to think, and he names three things together as the operating requirement: the ability to think, the ability to supply context, and the willingness to stay current with the technology.
CEOs Apply These Four Principles to Govern AI Without Slowing the Business
| Principle | What it means in practice | Named evidence from this interview |
| The timing question is external, not internal | The decision to adopt AI now depends on whether competitors and adversaries are pausing, not on whether the organization feels ready | Veiock committed Bearing to AI first development and product after concluding that the technology is permanent and that waiting assumes the rest of the world waits too, a conclusion he reached over roughly six months of watching the market |
| Governance lives on the platform, not on the tool | Consolidating on a system of record enforces responsible use once, instead of negotiating controls across thousands of independently adopted applications | Veiock built Bearing on ServiceNow so corporate security joins HR, IT, and cybersecurity on one platform, giving those teams a shared governance layer rather than another point solution added to the stack |
| Context is the precondition for useful AI | An LLM reasoning without access to organizational data produces generic output, so the system of record determines how much value AI can return | Veiock’s ServiceNow discovery at GoDaddy came from asking colleagues to explain a tool the business already owned, which redirected his security program away from buying a separate system and became the thesis Bearing was founded on |
| Match the control to the threat, not to the fear | Security spending that slows the business has defeated the mission it exists to protect, so the control is selected by context rather than by size | Veiock’s Diplomatic Security training placed diplomacy above security as the mission, and he credits that framing for why State Department peers went on to become senior security executives at some of the largest companies in the world |
Quotes from This Episode
- “Today is the worst that AI is ever going to be.” — Jason Veiock, Founder and CEO, Bearing
- “And I had the candidate share their screen and show me their prompts and the conversation that they had with the LLM of choice.” — Jason Veiock, Founder and CEO, Bearing
- “Security’s not the mission. Diplomacy’s the mission.” — Jason Veiock, Founder and CEO, Bearing
- “In order to effectively leverage AI, you have to have a system of record that you can query” — Jason Veiock, Founder and CEO, Bearing
- “We don’t need more point solutions. We don’t need to add to the tech stack. We need to reduce.” — Jason Veiock, Founder and CEO, Bearing
Frequently Asked Questions
How should a large enterprise govern employee use of AI?
Jason Veiock, founder and CEO of Bearing, governs AI at the platform level rather than the tool level, consolidating on a system of record that already holds the organization’s data. His reasoning is that a system of record supplies both the context an LLM needs to reason about the specific business and the governance layer that applies to every use of it. Without that consolidation, Veiock expects enterprises to repeat the 2018 to 2020 app sprawl cycle, where ten percent of a 350,000-person workforce building its own applications produces thousands of overlapping tools with no shared controls.
Should a company slow down AI adoption because of security risk?
Jason Veiock argues against pausing, and he tests the question by asking whether adversaries are pausing. His position is that criminals and hostile actors are already using AI, so a company that waits loses the capability to respond while gaining no protection. Veiock adds the geopolitical version of the same test: if a company waits, nothing obligates the rest of the world to wait alongside it, and not every other actor in the world is friendly.
What should a CEO look for when hiring for AI skills?
Jason Veiock asks candidates to share their screen during the interview and show him their actual prompts and conversations with their LLM of choice, because stated familiarity and daily practice are different things. His threshold is daily use, and he says a candidate who is not working with these tools every day will not thrive at Bearing. Veiock also looks for deep industry context, arguing that thirty years in a vertical is now an advantage because that accumulated context is what makes an LLM produce useful output.
CEOs Work with Glenn Gow to Scale Their Companies by Scaling Themselves First
Glenn Gow is The Scaling Executive Coach. He coaches ambitious executives into the CEO seat and CEOs into successful exits. With 25 years as a CEO and 5 years in venture capital, Glenn helps leaders scale their companies by scaling themselves first. If this conversation was useful, you can apply for executive coaching with Glenn Gow or apply to be a guest on The Scaling Executive Podcast.
