In an excellent blog post, “Avoiding AI Pitfalls in 2026: Lessons Learned from Top 2025 Incidents,” ISACA’s Mary Carmichael summarizes lessons learned from top incidents in 2025 using MIT’s AI Incident Database and risk domains. According to Carmichael, an analysis of the incidents showed recurring patterns across different risk domains, including privacy, security
AI Governance Program
Privacy Under Pressure: What the NYT v. OpenAI Teaches Us About Data Governance
By Roma Patel on
Posted in Artificial Intelligence
The rise of large language models (LLMs) such as ChatGPT has created novel legal implications surrounding the development and use of such artificial intelligence (AI) systems. One of the most closely watched AI cases currently is New York Times Co. v. Microsoft Corp., No. 1:23-cv-11195 (S.D.N.Y. filed Dec. 27, 2023), in which the New York…
CISO’s: Take a Look at CSC’s CISO Outlook 2025 Report
By Linn Foster Freedman on
Posted in Cybersecurity
Cybersecurity firm CSC recently issued its CISO Outlook 2025 Report, which predicts cybersecurity challenges CISOs will face in the next year. The report, from a survey of 300 CISOs and cybersecurity professionals globally, finds that CISOs “predict the cybersecurity challenges they face will intensify and the growth of artificial intelligence (AI) is increasing the…
50% of Professional Services Users Have Utilized AI Tools Not Authorized by Company
By Linn Foster Freedman on
Posted in Artificial Intelligence
A new survey from Intapp, titled “2025 Tech Perceptions Survey Report,” summarizes findings from a survey of fee-earners that there has been a “surge in AI usage.” The professions surveyed included accounting, consulting, finance, and legal sectors. Findings include that “AI usage among professionals has grown substantially, with 72% using AI at work versus…
Employees Hiding Use of AI Tools at Work
By Linn Foster Freedman on
Posted in Cybersecurity
A new study by Ivanti illustrates that one out of three workers secretly use artificial intelligence (AI) tools in the workplace. They do so for varying reasons, including “I like a secret advantage,” “My job might be reduced/cut,” “My employer has no AI usage policy,” “My boss might give me more work,” “I don’t want…
AI Governance: Steps to Adopt an AI Governance Program
By Linn Foster Freedman on
Posted in Artificial Intelligence
There are many factors to consider when assisting clients with assessing the use of artificial intelligence (AI) tools in an organization and developing and implementing an AI Governance Program. Although adopting an AI Governance Program is a no-brainer, no form of a governance program is insufficient. Each organization has to evaluate how it will use…
AI Governance: The Problem of Shadow AI
By Linn Foster Freedman on
Posted in Artificial Intelligence
If you hang out with CISOs like I do, shadow IT has always been a difficult problem. Shadow IT refers to refers to “information technology (IT) systems deployed by departments other than the central IT department, to bypass limitations and restrictions that have been imposed by central information systems. While it can promote innovation and…
Woeful Lack of Training for Chatbot Use in Workplace
By Linn Foster Freedman on
Posted in Cybersecurity
A new US National Cybersecurity Alliance survey shows that over one-third (38%) of “employees share sensitive work information with artificial intelligence (AI) tools without their employer’s permission.” Not surprisingly, “Gen Z and millennial workers are more likely to share sensitive work information without getting permission.”
The problem with employees sharing workplace data with chatbots is…
Now Is the Time to Schedule a Tabletop Exercise on AI
By Linn Foster Freedman on
Posted in Artificial Intelligence
We have previously suggested that conducting cybersecurity tabletop exercises are an important part of testing your incident response program and response to different scenarios.
A scenario that we strongly recommend including in your next scenario toolbox is one that focuses on the use of AI in your organization. If you have not yet developed and…
The AI Executive Order and the Healthcare Industry
By Linn Foster Freedman on
Posted in Artificial Intelligence
On October 30, 2023, President Biden issued the “Executive Order on the Safe, Secure, and Trustworthy Development and Use of Artificial Intelligence” (AI EO), which has specific impacts on the healthcare industry. We detailed general aspects of the AI EO in a previous blog post.
Some impacts on the healthcare industry have been outlined…