More than half of organizations reported an AI-related security incident or near miss in the past 12 months. Executives reported 26.7% actual incidents involving breaches, data exposure, or system disruption, and 31.2% close calls identified before harm. Despite this, executives remained highly confident in managing risks from employees using AI tools. The data points to shadow AI as a key cause, with 52% of knowledge workers admitting to using unapproved AI tools. Security and compliance teams cannot govern AI usage they cannot see. Organizations are advised to implement an AI governance framework using identity-centric controls, automated discovery, and secure sandboxes to test AI tools safely.
"More than half of businesses had an AI-related security incident or a scare in the past year - even as executives remain overwhelmingly confident in their ability to manage the risks of employees using AI tools, according to a study commissioned by identity and access management leader Okta."
"For the purposes of this survey, an AI security issue is defined as an actual incident, i.e. a breach, data exposure, or system disruption, or a close call, meaning an issue was identified before it caused harm to the organization,"
"Of those respondents who reported a security problem, 26.7 percent described an actual incident - a breach, data exposure, or system disruption - while 31.2 percent identified a close call caught before it caused harm. Yet, overall, 58 percent of executives reported that their organization experienced an AI-related security problem in the past 12 months and the data is pointing to "shadow AI" use by employees as the culprit, Peri said."
""The old adage in cybersecurity is that you can't protect what you can't see. Our research shows that 52 percent of knowledge workers admit to using unapproved AI tools," Peri told us. "Security and compliance teams can't govern the usage of AI tools they don't know are being used. Organizations must implement an effective AI governance framework that prioritizes identity-centric controls, automated discovery, and secure sandboxes to test drive AI tools safely.""
#ai-security #identity-and-access-management #shadow-ai #governance-and-compliance #employee-ai-tool-usage
Read at theregister
Unable to calculate read time
Collection
[
|
...
]