US investing in cybersecurity to keep AI lead, Von Arx

Estimated reading time: 5 minutes · Last updated: 12 September 2026

Sydney Von Arx, chief executive officer of Nightingale, told CNBC's Power Lunch on 11 September 2026 that the United States is investing in cybersecurity to maintain its lead in artificial intelligence. Von Arx framed the link as practical: securing the systems that run and train models, and improving how regulators understand AI agent behaviour, are part of keeping an edge. Her segment on Power Lunch ran 03:42 and focused on AI agent activity and how regulators can understand that activity. The piece presents Von Arx's view of investment and oversight as complementary tools to protect U.S. AI capabilities from adversary access and operational risk.

Why Von Arx ties cybersecurity to national AI leadership

Sydney Von Arx presented a simple causal idea on Power Lunch: if AI systems and their infrastructure are exposed, that exposure weakens a country's technological advantage. She described the problem in terms of adversary access to models and operational disruption rather than abstract competition. Framing investment in cybersecurity as part of a strategy to preserve an advantage places emphasis on defending compute, data pipelines and deployed agents against theft, tampering and misuse.

Von Arx spoke specifically about AI agent activity and regulators' need to understand it. Policymakers who can distinguish benign from risky agent behaviour are better placed to set rules that prevent harm without blocking innovation. The argument is not that spending alone secures leadership; it is that targeted cybersecurity measures reduce pathways by which rivals or bad actors could appropriate capabilities.

What 'how regulators can understand' means in practice

On 11 September 2026 Von Arx pointed to regulators' technical comprehension as central to effective oversight. That phrase—how regulators can understand—covers at least two practical needs: access to technical expertise and access to observable metrics about deployed systems. Regulators that can interpret telemetry from model deployments, or require audit logs for agent decisions, can differentiate acceptable operations from behaviours that require intervention.

Improving regulators' understanding is both a training and an instrumentation problem. Training builds in-house skills and relationships; instrumentation creates the data regulators can use. Von Arx presented this as a complement to cybersecurity investment, not a substitute: hardening systems reduces the volume of incidents regulators must adjudicate, while better oversight raises the cost of irresponsible deployment.

Industry and policy responses implied by the segment

The segment implied several paths industry and policymakers could take without prescribing specific programmes. First, companies can prioritise security controls for model training and deployment, such as stronger identity and access management for compute resources and stricter controls on data flows. Second, regulators could mandate transparency measures—logs, model cards or agent decision traces—that make agent activity auditable.

Von Arx's comments on CNBC point toward collaboration between vendors, customers and regulators: vendors build secure-by-design components, customers demand demonstrable controls, and regulators set baseline expectations. She did not cite funding amounts or particular agencies in the Power Lunch exchange, so the scope and shape of any U.S. spending announced or planned were not specified during the 03:42 segment.

What the segment left unsaid and why that matters

The Power Lunch clip provides a clear position but little detail. Von Arx argued for investment and for regulators to improve understanding, yet she did not name specific budget figures, programmes or timelines during the 03:42 appearance. For readers assessing impact, that absence matters: investment can mean public grants, procurement rules, tax incentives, or expanded agency budgets, and each has different market effects.

That lack of detail is also the reason verification is straightforward: public announcements, agency budget documents or company filings would show how U.S. investment is being channelled. Until those sources are cited, Von Arx's remarks are a policy view offered by a named industry CEO on CNBC's Power Lunch on 11 September 2026; they signal industry priorities rather than a completed policy package.

How the case for and against stronger cyber investment plays out

The bottom line

Sydney Von Arx used a short CNBC Power Lunch appearance on 11 September 2026 to connect U.S. cybersecurity investment with maintaining an edge in artificial intelligence. Her argument pairs technical defence—hardening model and agent infrastructure—with improved regulator capability to interpret agent behaviour. The segment signals industry priorities, but it does not substitute for the concrete programme details, budgets or agency actions that would show how that priority is being implemented. Verifying those specifics requires tracking agency statements, budget documents and any subsequent industry disclosures.

What to watch

• Watch for further public remarks from Sydney Von Arx or Nightingale about cybersecurity and AI; no date has been set.
• Watch for U.S. agencies to publish guidance or programmes linking cybersecurity funding to AI safeguards; no date has been set.