Technological Progress May Bring About New Security Risks

With the spread of artificial intelligence (AI), information security experts' tasks now extend to managing the security risks associated with it, as intelligent devices and AI-enabled process automation also represent new exposures, the audit and consulting firm Deloitte said in a statement sent to MTI.

Gergő Barta, chief AI expert in Deloitte's cyber defense practice, said in the statement that there are already signs that the evolution of technology is posing new challenges for organizations, with security incidents being the most significant operational risk worldwide for the second year running. The costs associated with these incidents have already reached unprecedented highs in 2022 and are expected to jump several-fold in the coming years," he said.

The new security risks will increase the role of information security managers. Their role is to educate staff and inform managers about the latest risks and how they can be managed.

Security experts will need to assess how models handle sensitive data and ensure that they comply with data protection laws and regulations.

Managers should put in place a robust authorization management process to ensure that only authorized individuals have access to systems, models and data. Organizations should have adequate logging capabilities and monitoring systems in place to detect and respond promptly to security incidents.

Security managers should lead training on systems and make employees and stakeholders aware of what is relevant.

Looking to the future, organizations should immediately begin using methods such as tailored or position-specific professional training, online courses and outreach workshops to educate and train employees on the potential risks of implementing generative AI, Deloitte says.