The Cyber Defense eMagazine November Edition for 2023

usiness email communication, data sharing with third parties, or the utilization of established third-party
code projects.
Chief Information Security Officers (CISOs) should also consider running awareness campaigns to
educate users about the inherent risks associated with this technology. Establishing a comprehensive
rulebook that delineates who can utilize what and what should remain confidential will help.
While international policymakers are actively formulating strategies to foster a responsible AI ecosystem,
organizations must align their efforts with government-endorsed approaches to fend off potential threats.
It’s important to remember that GenAI risks extend beyond cybersecurity – they encompass privacy and
data protection risks, regulatory compliance, legal exposure, and AI ethics. This means that CISOs must
stay vigilant, not only regarding current risks but also those on the horizon.
Redefining The Security Roadmap
A big concern for enterprises is that employees dabble in GenAI away from the watchful eye of IT. In
effect, it’s now a major vector of Shadow IT. Research found that 7 out of 10 folks who’ve jumped on the
ChatGPT bandwagon aren’t telling their supervisors. While more than two-thirds of employees continue
to engage in non-enterprise applications, CISOs need to question why such applications are gaining
prominence and attain a clear picture of these users.
Alarmingly, studies show that 4% of employees have placed sensitive corporate data into language
models. Cybersecurity leaders can work on this by deploying protection tools to ensure safer transit of
data, ensuring that sensitive information remains shielded from unauthorized access or exposure.
Finally, there are tools like unified endpoint management (UEM) that can restrict the transfer of sensitive
data across unapproved devices or applications by defining accessibility. Admins can authorize device
access to such applications based on the user’s role. Endpoint management solutions, when integrated
with identity and access management (IAM), will flag admins if confidential data is shared. In the
unfortunate event of a device with ChatGPT access being misplaced or stolen, UEM solutions can
remotely erase data from the device, effectively shielding sensitive information from falling into the wrong
hands.
GenAI is understandably gaining ground in the modern workplace. Corporations are taking these tools
for a spin, developers are cozying up to them, and employees are experimenting with them. At the end
of the day, CISOs must create a security-conscious environment without stifling the productivity of their
workforce. It’s therefore vital to find the perfect harmony between innovation and safety. End of article.
Cyber Defense eMagazine – November 2023 Edition 79
Copyright © 2023, Cyber Defense Magazine. All rights reserved worldwide.