Ensuring AI Compliance, Security Controls

In the latest “Proof of Concept,” Troy Leach, chief strategy officer at Cloud Security Alliance, and Avani Desai, CEO at Schellman, discussed integrating AI into organizational frameworks. They highlighted the evolving roles of compliance and leadership and the importance of regulatory frameworks in ensuring robust and trustworthy AI deployment.

See Also: Building Better Security Operations Centers With AI/ML

Leach emphasized the significance of leadership in AI governance, stating. “We need clear AI policies and acceptable practices, which are still missing in the vast majority [of organizations],” Leach said. “We have struggled very clearly in enterprises with documentation, logging and monitoring.”

Desai added that fostering a culture of accountability and transparency is crucial for compliance and security. “Rather than imposing blanket restrictions, we decided to prioritize educating our team members on responsible usage, really focusing on fostering a culture of accountability and security awareness,” she said, adding that “you have to proactively establish documentation and communication channels.”

The panelists – Leach, Desai, Anna Delaney, director, productions, ISMG, and Tom Field, senior vice president, editorial, ISMG – discussed:

• The importance of regulatory frameworks including NIST AI RMF and ISO 42001;
• The evolving roles of AI officers and the need for clear organizational responsibilities;
• Challenges and strategies for implementing AI within a zero-trust framework.

Leach has spent more than 25 years educating about and advocating for the advancement of responsible technology to improve the quality of living and parity for all. He sits on several advisory boards as an expert in information security and financial payments. Leach also founded a consulting practice that advises on the opportunities to leverage blockchain technology, zero trust methodology and various cloud services to create safe and trusted environments. Previously, he helped establish and lead the PCI Security Standards Council.

Desai has domestic and international experience in information security, operations, P&L, oversight and marketing involving both startup and growth organizations. She has been featured in Forbes, CIO.com and The Wall Street Journal and is a sought-after speaker on a variety of emerging topics, including security, privacy, information security, future technology trends and the rising number of young women involved in technology.

Don’t miss our previous instalments of “Proof of Concept”, including the Feb. 27 edition on how do we secure elections in the age of AI and the Mar. 21 edition on opening up the AI black box.