In episode 198 of Cybersecurity Where You Are, Sean Atkinson discusses artificial intelligence (AI) and privacy from a risk-based cybersecurity perspective. Together, he explores how organizations and individuals can assess AI risk, apply governance frameworks, evaluate third-party AI services, and balance innovation with due diligence.
Here are some highlights from our episode:
- 00:41. Framing the conversation around AI, privacy, and risk-based controls
- 02:22. Due diligence and ethical considerations around AI products and services
- 03:14. Data minimization and transparency as foundations for AI privacy
- 04:46. Privacy impact assessments as a way to understand AI data collection and use
- 05:42. AI governance and the tension between implementation velocity and risk management
- 10:08. The use of existing data flows and controls in AI assessments
- 11:57. Algorithmic transparency and the challenge of understanding AI decision making
- 13:47. Standards, frameworks, and data sovereignty in AI privacy governance
- 15:12. Encryption, anonymization, tokenization, and federated learning as privacy safeguards
- 16:40. The need to shift stakeholder input left in AI development and deployment lifecycles
- 19:13. Building literacy around security, data management, privacy, and AI risk
- 23:40. The value of cross-functional and written assessment criteria for AI risk
- 26:21. A call to action for keeping pace with AI privacy and and innovation risk
Resources
- CIS Controls v8.1.2 AI Security Guidance Workbook
- Episode 105: Context in Cyber Risk Quantification
- Service Provider Management Policy Template for CIS Control 15
- EU AI Act: first regulation on artificial intelligence
- AI Risk Management Framework
- IAPP AI Governance Center
- Episode 120: How Contextual Awareness Drives AI Governance
- Secure by Design v1.1 A Guide to Assessing Software Security Practices
- Reasonable Cybersecurity
If you have some feedback or an idea for an upcoming episode of Cybersecurity Where You Are, let us know by emailing [email protected].
Fler avsnitt av Cybersecurity Where You Are (audio)
Visa alla avsnitt av Cybersecurity Where You Are (audio)Cybersecurity Where You Are (audio) med Center for Internet Security finns tillgänglig på flera plattformar. Informationen på denna sida kommer från offentliga podd-flöden.
