What sorts of guardrails should be considered before making ChatGPT part of your org’s security compliance efforts?

Security & GRC AI & Machine Learning Governance, Risk & Compliance+1 more

1.6k views1 Upvote6 Comments

Sort By:

Oldest

Chief Information Security Officer in Healthcare and Biotecha year ago

The most important parameter would be - 1. what to share? 2. How to share ? 3. Which dept should use ?

Senior VP & CISOa year ago

Review existing polices data governance, data protection, acceptable use, infosec, etc. Communicate reminder on those policies. Consider a governance committee.

CISO in Softwarea year ago

Your regulatory environment will inform some of this. Production environments should inform most of the rest.

For those opposed to hitting ChatGPT with the ban-hammer I think it's likely you will see some sort of structured review and approval process folded into most corporate governance.

Please join or sign in to view more content.

By joining the Peer Community, you'll get:

Peer Discussions and Polls
One-Minute Insights
Connect with like-minded individuals

Director of IT in Energy and Utilitiesa year ago

Definition of standards and policies for reference points in compliance efforts.

Global Head of AI, Data & Analytics in Softwarea year ago

Is your data being sent back for model training
Is there a reason ChatGPT specifically is being made part of the efforts
What is the nature of the data and who are the users of the chatbot

Content you might like

We are a large manufacturing company with over 17,000 associates, about half of whom have company-provided cell phones. We average two lost devices per week, which seems low, but executive management is concerned and wants to know if our numbers are typical compared to other companies. My questions are: 1. Do other companies also struggle with lost or stolen devices? 2. What is the average number of lost devices per week? 3. Are there repercussions for associates who lose devices due to carelessness or negligence?

Mobile Device Management (MDM)Mobile Devices Security+2 more

VP of IT in Retail3 days ago

My previous organization implemented a strict one-strike policy for lost or damaged devices. While the first incident was considered an accident, repeat offenders were required to reimburse the company for the lost or damaged ...read more

82 views1 Comment