This talk explores how AI is changing security design, highlighting the opportunities and limitations of its use in threat analysis and risk assessment. It clarifies which tasks can be delegated to AI and which decisions require human judgment, and introduces design principles applicable across industries that support traceable analysis and ongoing risk-informed decision-making.