AI security · Intermediate
The AI security questions every organization should ask
AI tools can make work easier, but they introduce new routes for sensitive data to leave an organization and new ways to influence automated decisions.
Start with the data
Find out what information a tool receives, where it is stored, and who can access it. Give employees clear guidance on what they may share.
Understand prompt injection
An AI assistant may encounter malicious instructions inside a document, message, or website. If it treats those instructions as trusted, it may take an unintended action.
Build practical boundaries
Limit access to tools and data, validate results, and involve a person before important actions. Assess risks for each use case rather than assuming every AI system has the same risks.