The growing use of unauthorized generative AI tools, termed 'shadow AI,' is creating a significant disconnect between corporate policies and employee behavior, leading security leaders to prioritize technical enforcement over written governance.
The UK's National Cyber Security Centre (NCSC) has warned that this unmanaged AI usage can lead to sensitive data exposure and security blind spots.
Matthias Haas, CTO at IGEL, said that policies are only effective when backed by visibility and technical controls at the point of access, stating that organizations must know which AI services employees are utilizing. This gap presents an opportunity for MSPs and MSSPs to offer ongoing governance services across endpoints, browsers, and network infrastructure, rather than just one-time policy work.
Controls at both the network and endpoint layers are crucial for monitoring AI workloads and the data being transmitted. Secure enterprise browsers are emerging as a key governance layer, enabling tracking, monitoring, and blocking of noncompliant AI prompts. Ultimately, effective AI governance requires a combination of user awareness, endpoint controls, and network-level enforcement to manage risks and ensure compliance, especially in highly regulated industries.
Source: Channel Insider
Kelley Damore is Chief Content Officer at CyberRisk Alliance, where she leads content strategy across the company’s digital brands, research, communities and live events serving CISOs and security practitioners. At CyberRisk Alliance, she is focused on delivering 365-day engagement, trusted journalism and actionable insights to help security leaders navigate an increasingly complex threat landscape.
Kelley Damore is Chief Content Officer at CyberRisk Alliance, where she leads content strategy across the company’s digital brands, research, communities and live events serving CISOs and security practitioners. At CyberRisk Alliance, she is focused on delivering 365-day engagement, trusted journalism and actionable insights to help security leaders navigate an increasingly complex threat landscape.
An error occurred trying to play the stream. Please reload the page and try again.
CloseRegistering with SC Media is 100% free. Join tens of thousands of cybersecurity leaders today and gain access to the latest analysis shaping the global infosec agenda.
