Half of Security Leaders Report Sensitive Data Exposure Through AI Too
The researchers said the findings demonstrate that many organizations lack visibility into the types of data being shared with AI tools, even those that are approved for use in the enterprise.
The researchers said the findings demonstrate that many organizations lack visibility into the types of data being shared with AI tools, even those that are approved for use in the enterprise.
While 62% of respondents could identify users or departments sending data to AI tools, less than half (48%) said they could provide any record of the types of data that had left the organization through AI tools.
This shows why security teams cannot stop at deciding which AI tools employees are allowed to use.
Organizations also need to control what information is shared with them, commented Darren Williams, founder and CEO of BlackFog; almost all organizations (98%) reported having an AI usage policy in place.
Around a third (35%) said that while their organization has a written policy specifying what information employees must not enter into AI prompts, there is no technical enforcement.
The BlackFog research , published on November 4, also highlighted a significant governance gap around AI agents operating in organizations’ environments.
Meanwhile, 39% of security leaders admitted that AI adoption is moving faster than they can govern it.
Read now: Unchecked AI Agents Cause Cybersecurity Incidents at Two Thirds of Firms Technology and telecoms were the industries where this issue was most prevalent, with 70% of respondents stating that autonomous AI agents were outside of organizational controls.
In addition, only 54% of security leaders said they had the ability to block or restrict unsanctioned AI tools and around a third (32%) are able to detect shadow AI use but are unable to consistently stop it.
What happened
The researchers said the findings demonstrate that many organizations lack visibility into the types of data being shared with AI tools, even those that are approved for use in the enterprise.
While 62% of respondents could identify users or departments sending data to AI tools, less than half (48%) said they could provide any record of the types of data that had left the organization through AI tools.
This shows why security teams cannot stop at deciding which AI tools employees are allowed to use.
What changed
Organizations also need to control what information is shared with them, commented Darren Williams, founder and CEO of BlackFog; almost all organizations (98%) reported having an AI usage policy in place.
Who is affected
Around a third (35%) said that while their organization has a written policy specifying what information employees must not enter into AI prompts, there is no technical enforcement.
The BlackFog research , published on November 4, also highlighted a significant governance gap around AI agents operating in organizations’ environments.
Why it matters
Meanwhile, 39% of security leaders admitted that AI adoption is moving faster than they can govern it.
Response
Read now: Unchecked AI Agents Cause Cybersecurity Incidents at Two Thirds of Firms Technology and telecoms were the industries where this issue was most prevalent, with 70% of respondents stating that autonomous AI agents were outside of organizational controls.
In addition, only 54% of security leaders said they had the ability to block or restrict unsanctioned AI tools and around a third (32%) are able to detect shadow AI use but are unable to consistently stop it.
Attribution
Infosecurity Magazine: The researchers said the findings demonstrate that many organizations lack visibility into the types of data being shared with AI tools, even those that are approved for use in the enterprise.