What Mature Security Programs Need Before Pre-AI

Serdar HocamAuthor & Editor

Mark Alvarado, Information Security Manager at Academy Sports + Outdoors, evaluated the fundamental visibility and risk thresholds required prior to artificial intelligence integration.

◉ 0 views
What Mature Security Programs Need Before Deploying AI - Emerj Artificial Intelligence Research

Mark Alvarado, CISO at Academy Sports + Outdoors, shared the problem-focused evaluations and infrastructure requirements necessary for the secure deployment of artificial intelligence tools.

Risks in Artificial Intelligence Tools

Enterprise information security managers are under intense pressure to purchase artificial intelligence-supported tools. It is becoming difficult to distinguish whether the products offered on the market actually reduce risks.

Corporate Security Reports

According to World Economic Forum data, approximately one-third of organizations lack a process to evaluate the security of artificial intelligence tools. Eighty-seven percent of leaders view artificial intelligence vulnerabilities as the fastest-growing cyber risk.

Impact of Third-Party Tools

The National Institute of Standards and Technology states that third-party generative artificial intelligence tools pose privacy and security risks through the systems they can access.

Over-Privileging and Security Incidents

Cloud Security Alliance research shows that fifty-three percent of organizations have experienced over-privileging in artificial intelligence agents. Additionally, forty-seven percent of organizations have encountered a security incident in the past year.

Response and Control Capabilities

According to the ISACA report, fifty-six percent of digital trust professionals do not know how quickly they could shut down an artificial intelligence system during a security incident.

Expert Evaluations and Approaches

In the interview with Mark Alvarado on the Emerj platform podcast, how security leaders can separate real artificial intelligence value from vendor claims was discussed.