Governance of Generative AI
https://www.cybersecuritytribe.com/articles/governing-generative-ai-what-cisos-are-saying-behind-closed-doors This week I reviewed an article related to the governance of generative AI (GenAI) and how Chief Information Security Officers (CISO) are approaching this issue from various organizations. The general consensus seems to be that companies are being cautious when adopting GenAI tools due to the security issues that they present, such as exposing sensitive data. In addition, concerns have also been raised about “creating regulatory and contractual risk that are difficult to unwind later”. To address this, some companies are utilizing internal GenAI platforms as a way of providing additional controls over these tools. This helps address internal concerns, but outside vendors that these organizations rely on are also utilizing GenAI tools. Agreements on how customer data is used for model training and notifications on when AI f...