Fortinet's Board Move Signals a New Era for Cybersecurity Governance

SUNNYVALE, CA – June 24, 2026 – When a major cybersecurity firm like Fortinet announces a new board member, the news typically merits a brief mention in the financial pages. But the appointment of Derek Kan is anything but routine. It’s a deliberate, strategic move that signals a fundamental shift in how the technology industry’s leaders view the landscape of risk, regulation, and national security. By bringing Kan into its highest echelon of governance, Fortinet is acknowledging a new reality: in the age of AI, cybersecurity is no longer just a technical problem. It is a complex challenge of public policy, large-scale infrastructure, and geopolitical strategy.

Kan is not a typical tech executive. His resume reads like a roadmap of the 21st century’s most complex intersections: a tech entrepreneur who sold his AI-powered logistics company, Deliverr, to Shopify for $2.4 billion; a senior government official who managed the U.S. government’s multi-trillion-dollar budget; and a policy architect who shaped regulations for emerging technologies like autonomous vehicles. This unique combination of private-sector innovation and public-sector governance is precisely what makes his appointment so significant.

A Strategic Play Beyond the Boardroom

Fortinet’s decision to appoint Kan is a masterclass in strategic foresight. The company is not just adding a seasoned executive to its board; it is integrating a deep well of experience that directly aligns with its most critical growth and risk areas. As Ken Xie, Fortinet's Founder, Chairman, and CEO, stated, “As cybersecurity becomes increasingly central to enterprise and national security, Derek’s background navigating complex regulatory environments, overseeing critical infrastructure, and driving technology transformation at scale will be an invaluable asset.”

Kan's experience deploying AI on a massive scale is a prime example. Following the acquisition of his company, Deliverr, he led the enterprise-wide AI deployment across customer experience and operations at Shopify. This isn't theoretical knowledge; it's practical, hard-won expertise in making AI work in the real world. For a company like Fortinet, whose FortiGuard Labs relies heavily on machine learning and AI to deliver threat intelligence, having a director who has been in the trenches of AI implementation provides an unparalleled level of strategic oversight. It ensures that the company's AI initiatives are not just technologically sound but also operationally effective and commercially viable.

Furthermore, Kan's deep roots in the public sector offer Fortinet a crucial advantage. His tenure as Deputy Director of the White House Office of Management and Budget and as U.S. Under Secretary of Transportation provided him with an insider’s understanding of government procurement, regulatory processes, and the priorities of national security. In an era where government contracts are a major revenue stream for cybersecurity firms and where new regulations can reshape the market overnight, this kind of policy fluency is no longer a “nice-to-have” for a board; it is essential. Kan’s experience helps Fortinet not only react to policy changes but also anticipate and help shape them, turning regulatory challenges into strategic opportunities.

The New Mandate for Tech Leadership

Kan's appointment is a powerful case study in a broader industry trend: the convergence of technology, policy, and national security. The days when a tech company could succeed by simply building a better product in isolation are over. Today’s leading firms understand that they operate within a complex ecosystem of government agencies, international regulations, and geopolitical forces. To navigate this new terrain, they need leaders who are fluent in the languages of both Silicon Valley and Washington, D.C.

In his own words, Kan acknowledged this new reality. “Cybersecurity sits at the intersection of technology, policy, and national security,” he stated. “I’ve spent my career operating at this intersection, deploying AI at scale, and navigating the regulatory and policy environments that shape how technology gets built and adopted.” His career reflects this hybrid identity. Nominated by three different presidents and confirmed by the Senate on four separate occasions, Kan has demonstrated a rare ability to work effectively across the political spectrum, a skill that is invaluable in today's polarized environment.

This demand for multifaceted leaders is evident in Kan’s other board positions. He serves on the boards of Toll Brothers (real estate), Globe Life (insurance), and Oklo (nuclear energy), and as Vice Chairman of the U.S. Postal Service Board of Governors. These are not just tech companies; they are pillars of the national infrastructure. His presence on these boards underscores a growing recognition that expertise in technology, AI, and public policy is now a core requirement for governing any large, complex organization in a world defined by digital transformation and systemic risk.

Governing in the AI Era

The rise of artificial intelligence presents a profound governance challenge, particularly in cybersecurity. AI is a double-edged sword: it is being used to create more sophisticated, automated, and evasive cyberattacks, while simultaneously being harnessed to build more intelligent and responsive defense systems. For a corporate board, overseeing this dynamic is a monumental task. It requires a level of technical and ethical understanding that goes far beyond traditional corporate governance.

This is where Kan’s appointment becomes critically important. He described cybersecurity as a “foundational infrastructure challenge of the AI era,” a perspective that frames the issue not just as a corporate risk but as a societal one. His experience provides Fortinet’s board with a director who can ask the right questions about the company’s AI strategy. How are we ensuring our AI systems are secure from adversarial attacks? What are the ethical implications of our AI-driven security tools? How are we preparing for the next wave of AI-powered threats? And how do we align our product development with the evolving regulatory landscape for AI?

Having led AI deployment at Shopify and overseen policy for emerging technologies at the Department of Transportation, Kan is uniquely positioned to guide these discussions. He understands both the promise and the peril of AI, and he has firsthand experience in the delicate balancing act of fostering innovation while managing risk. For Fortinet and its nearly one million customers, having that expertise at the board level is a powerful form of assurance that the company is prepared to meet the challenges of the AI era head-on.