Use Of Artificial Intelligence In Cyber Security

The use of artificial intelligence in cyber security tends to be discussed as attack and defence. There is a third question that is live in every organisation right now.

People are using these tools already. Drafting with customer details in the prompt, summarising documents containing personal information, pasting in code or contracts. Usually with good intent and usually without anyone assessing where that information goes or how long it is kept.

Prohibition does not work, because the tools are useful and access is trivial. What works is being specific. Which tools are approved, what may never be entered into any of them, and where to ask when someone is unsure.

Silence is read as permission, and it is the most common position organisations are actually in.

The Office of the Australian Information Commissioner publishes guidance on handling personal information. This is general information rather than legal advice, and obligations vary by state and territory.

See Sentrient’s HR policy templates and privacy training course.