That implies that CISOs have to do a danger evaluation of each genAI app workers are utilizing, he stated in an interview, after which set insurance policies and procedures workers should comply with.
He warned CISOs and CEOs towards following ‘the Ostrich algorithm’ – pretending the hazard doesn’t exist by ignoring, if not rewarding, the shadow use of AI by workers, both within the workplace or at residence.
“There’s no query there’s an incredible quantity of use of generative AI apps being utilized in methods which might be extremely problematic for the group,” he stated. “Keep in mind, I can use a genAI app from my private pc that my firm has no management over, and nonetheless leak an incredible quantity of knowledge simply from what I’m asking – and it is probably not solely what I’m asking, however what others are additionally asking, and the generative AI learns from the sample of questions.