This talk explores how to assess the true severity of AI threats, balancing security investments with real risk. Drawing from my journey as an AI engineer to AI standards creator, I’ll share hard-learned lessons on evaluating AI attacks, analyzing their impact, and aligning defenses with standards and legislation, including the AI Act. We’ll apply this approach to real-world cases—including a few personal failures—to highlight what effective AI security analysis looks like in practice.