Adrian Johnson
TLDR:
– Generative artificial intelligence (GenAI) raises questions about governance and security
– Shadow AI or unsanctioned GenAI use within organizations is a growing concern
– Security professionals are exploring solutions like guardrails for GenAI use
– Steps include leadership oversight, data classification, creating AI policies, and employee training
In the realm of cybersecurity, the emergence of generative artificial intelligence (GenAI) has raised new questions about governance and security. Referred to as “Shadow AI,” unsanctioned GenAI use within organizations is becoming a growing concern. Security professionals are actively exploring solutions such as guardrails for GenAI use to address this issue.
One major area of focus is ensuring leadership oversight, understanding the costs associated with AI usage, and bringing all projects under enterprise risk controls. Data classification, the creation of AI policies, and ongoing employee education and training are also key steps in managing the use of GenAI within organizations.
Shadow AI poses functional, operational, legal, and resource risks that must be addressed through strategic leadership and proactive measures. With the right approach, organizations can mitigate the threats posed by unsanctioned GenAI use and establish clear policies and guidelines for safe and effective AI deployment.
