The Short Version
- Read by: Daniel Thomas May's performance received pointed criticism from at least one reviewer for pulling focus from otherwise solid content, the characters read as flat in audio, which blunts the case-study framing.
- At its heart: Zero Trust security applied to AI systems, adversarial machine learning, regulatory alignment
- Vibe: Technically ambitious and urgent, with a narrative wrapper that doesn't always hold
- Short version: The security framework for AI is genuinely useful and current; whether the fictional case-study format serves that content in audio is a fair question worth considering before purchasing.
Security books that also function as audiobooks face a particular challenge: the genre tends toward technical density, and audio strips away the diagrams, code blocks, and reference tables that usually anchor complex material. Rise of the Machines: A Project Zero Trust Story by George Finney takes an unusual approach to this problem by wrapping its security content in a fictional case-study narrative, following characters through workplace scenarios designed to illustrate Zero Trust principles applied to artificial intelligence. Whether that narrative wrapper succeeds in audio is the central question for anyone considering this edition.
The short answer is: the content is worth your time, and the format is imperfect in ways that matter. Finney's core argument, that AI systems require Zero Trust architecture precisely because they rely so fundamentally on trusted data and trusted systems, making them structurally vulnerable to manipulation, is both timely and well-constructed. This is a continuation of his 2023 bestseller Project Zero Trust, addressing AI, mergers and acquisitions, antivirus systems, business continuity, and remote work. All of it is filtered through the lens of emergent AI dominance across enterprise environments, and that editorial focus feels genuinely current.
Aly F.'s Restaurant Analogy for AI Security
The Zero Trust framework Finney applies to AI is not novel as a concept, the principle of "never trust, always verify" predates large language models by decades, but his application of it to AI-specific attack surfaces is where the book earns its place. MLOps pipelines, GPT deployment, chatbot integration, adversarial AI tactics: Finney moves through each of these with a practitioner's eye rather than a theorist's. Reviewer Dutch26 quoted the book's advice on proactive failure analysis rather than post-incident review, noting it resonated beyond Zero Trust into broader professional practice. That's the kind of durable insight that makes technical books worth revisiting.
Reviewer Aly F. praised the restaurant analogy Finney uses to explain AI security architecture, calling it an unexpected but effective way to make abstract security concepts tangible. That's characteristic of Finney's approach: he reaches for analogies from everyday contexts to illuminate technical principles that would otherwise require significant background. For IT professionals who already understand the conceptual vocabulary, those analogies may occasionally feel simplistic. For those newer to Zero Trust thinking, they're an asset.
May's Narration Pulls the Wrong Direction
The regulatory dimension is worth highlighting, because many security books treat compliance as an afterthought. Finney dedicates meaningful attention to regulatory alignment with Zero Trust practices, which matters increasingly as AI governance frameworks develop at the legislative level. For IT professionals working in regulated industries, that section alone justifies the investment. For those in less regulated environments, it provides useful anticipatory framing for where governance is likely to land in the next several years.
Daniel Thomas May's narration is where the audiobook runs into genuine friction. One reviewer put it directly: the content about AI and security is solid, but the narration pulls in the wrong direction, and the characters feel thin. That critique matters more in a case-study format than it would in a straight-prose technical book, because the fictional framework depends on the characters carrying the scenarios. When the characters don't land, the scenarios feel more schematic than immersive, and the listener has to do extra cognitive work to extract the substantive content from its fictional wrapper.
That's not a fatal flaw, but it's worth naming honestly. If your primary reason for choosing the audio format is convenience rather than preference, and if you have access to the print or ebook version, you may find the material lands more cleanly in that form. The audiobook is a valid way to absorb this content, particularly for IT professionals who do most of their reading during commutes or workouts where text isn't practical. But set expectations accordingly.
New Listeners May Miss the Institutional Dynamics
Listeners should be aware that this book functions as a sequel to Project Zero Trust. Finney explicitly notes that Rise of the Machines picks up where the first installment left off and addresses issues not covered there. While the AI material introduced in this volume can likely be followed without reading the predecessor, the character relationships and organizational context from book one do carry forward. New listeners may find themselves occasionally confused about institutional dynamics that are presented as already established.
The most technically dense sections involve MLOps and adversarial AI tactics. These are the areas where the audio format strains hardest, because the specificity of the content benefits from re-reading and cross-referencing in ways that audio doesn't easily allow. Finney manages the complexity reasonably well through the case-study framing, but listeners who want to implement the principles discussed will likely want the print edition as a working reference regardless of which format they use for initial exposure.
Read This as a Practitioner's Guide
Network engineers, system administrators, cloud architects, and IT security professionals who are grappling with how to extend Zero Trust principles to AI deployments will find this audiobook substantively useful. Finney is working from current practice rather than future speculation, and his case-study approach makes the material more immediately applicable than many technical books of similar scope.
Listeners who have not read Project Zero Trust may want to begin there first. Those who are primarily interested in the AI security dimension and have a solid enough Zero Trust background to engage the material without the predecessor's context can likely enter here directly, while accepting some friction around character and organizational backstory. Approach this as a practitioner's guide rather than a narrative experience and the seven-plus hours will reward the investment.
A Few Questions About Rise of the Machines
Do I need to read Project Zero Trust before this audiobook, or does Rise of the Machines stand on its own?
Finney frames this as a sequel that picks up where the first book left off. The AI security content can be followed independently, but the character context and organizational dynamics from Project Zero Trust do carry forward, so new listeners may encounter some friction around backstory.
Is the audiobook format well-suited to this technical security content, or would print work better?
At least one reviewer explicitly warned against the audio version, citing narration that undercuts the fictional case-study framework. The security content itself is solid, but listeners who need to reference or implement material should consider keeping the print edition alongside for active use.
