Sometimes it doesn’t even have to fall into the wrong hands, but rather end users’ lack of expertise allows sensitive information to surf the web. There’s the case of ChatGPT conversations indexed by Google. “When the ‘make this chat discoverable’ option is activated, the user of certain AI solutions such as ChatGPT agree to make them public and accessible from Google or other search engines and appear in search results, which generates controversy because some of these chats may contain sensitive data, business ideas, commercial strategies or personal experiences,” explains Lambert.
In fact, AI is already one of the most worrying issues for CISOs who are beginning to show signs of burnout from an increasingly complex work environment. While 64% of security managers believe that enabling the use of generative AI tools is a strategic goal in two years’ time, they are also concerned about the risks they pose. This is confirmed by data from Proofpoint’s fifth annual Voice of the CISO report.
“AI has gone from a concept to a fundamental element, transforming the way defenders and adversaries alike operate,” explains Ryan Kalember, chief strategy officer at Proofpoint. “CISOs now face a dual responsibility: to leverage AI to strengthen their security posture while ensuring its ethical and responsible use,” he adds. To do so, they will have to make “strategic decisions” but with the added complexity that CISOs are not the only decision-makers in the implementation of this resource.
