Responsible AI Means IT Security Has to Evolve

Recent results of a chief information officer (CIO) survey conducted by Lenovo are not surprising. AI is IT’s most urgent priority, matched only by cybersecurity. However, 76% of CIOs say their organizations don’t have an AI-ready corporate policy on operational or ethical use. And 37% of CIOs say security is a barrier to scaling AI.

AI and security convergence

No doubt AI and security are converging, and this dynamic is forcing business leaders to think critically about new considerations surrounding security and risk. How does AI impact the security culture of an organization? What new controls are needed to protect data, operations, employees, and customers? What should ethical and responsible AI mean to the average employee?

The relationship between AI and security means the two are occasionally at odds, and now increasingly reciprocal. Understanding that organizational structures and priorities can be unique, I wanted to share three AI-centered enablers and initiatives companies should consider in the pursuit of ethical AI effectiveness and accountability:

• A Chief AI Officer (CAIO) who reports directly to the CEO, reflecting priorities and the way to partner with customers. This role at the C-level reinforces that AI needs to be part of boardroom conversations.

• A Responsible AI Committee, comprised of a diverse group of employees who ensure solutions and products meet security, ethical, privacy, and transparency standards. This group reviews AI usage and implementation based on risk, applying security policies consistently to align with a risk stance and regulatory compliance. The committee’s inclusive approach addresses all AI dimensions, ensuring comprehensive compliance and overall risk reduction—it’s the right thing to do.

• An AI Center of Excellence (CoE) that wields core competencies across security, people, technology, and processes to help advise and implement the right strategies and solutions and deploy them for customers. An AI CoE can develop an AI point of view, curate assets (ecosystem, partners, technologies, methodologies, offerings), and ensure consistent execution of engagements and development efforts. The goal is to create a focused expertise hub for complex, fast-moving technologies, providing clarity in market offerings.

The stewardship of security of AI is critical to the reliable and responsible safeguarding of both data and privacy. As with any area of business focus, success requires substantial organizational commitment at the highest levels. At the application level, AI is helping organizations drive security agendas, even while the adoption of AI introduces or heightens myriad considerations for IT security organizations (not limited to data privacy, responsible model development, and governance).

AI and Security Emerging in the Digital Workplace

Compared with the AI maturity of an organization’s people, processes, and security policy, the technology adoption might be the least challenging part. And as AI presents new challenges and questions, it also plays a vital role in enhancing IT security.

AI is being used to create hyper-personalized profiles to mitigate employee risk exposures. Its efficacy in reviewing security logs helps bolster advanced threat detections and can generate comprehensive views of security estates and automated responses to cyber threats. Additionally, GenAI-powered support delivery platforms manage critical tasks pre-emptively, helping to keep environments secure.

To assist, IT vendors are providing advisory services, and technical and security readiness assessments to help customers along the journey, while AI in-a-box offerings help mitigate security considerations with baked in compliance.

Synergies Gained Through Thoughtful Assessment

As AI becomes increasingly widespread, it’s critical for organizations to understand that it presents new considerations and challenges, particularly when it comes to IT security. But AI is also helping make modern digital workplaces more secure. A responsible, ethical AI implementation begins with a reflective, thoughtful assessment of readiness and a clear understanding that AI and IT security are increasingly and inextricably connected. This convergence requires much discussion, thoughtful questioning, and C-level attention in guiding enterprises to adopt programs and policies that will be instrumental in enabling secure, responsible, and ethical AI.