Uncovered Use of Artificial Intelligence by a Significant Workforce Remains Problematic in the Workplace
===================================================================
In today's digital age, Artificial Intelligence (AI) tools are becoming increasingly prevalent in the workplace. However, a recent study by Veritas Technologies reveals that 38% of UK office workers have fed sensitive information such as customer financial data to AI tools without proper authorization [1]. This trend poses significant risks to organizations, as unauthorized AI tool use can lead to data security breaches, loss of intellectual property, compromised compliance, operational ambiguity, and reduced accountability.
One of the primary concerns is the potential for security and data breaches. Employees may unknowingly or intentionally share sensitive credentials or data with unmanaged AI tools, increasing exposure to insider threats and data leaks [2]. For example, many AI tools interact with business systems without formal access governance, making it difficult to track usage or audit actions for compliance.
Another risk is the loss of intellectual property and trade secrets. AI tools may aggregate or exfiltrate proprietary information without employer awareness, risking competitive advantage or legal consequences [1][4]. This is exemplified by an incident at Samsung, where an engineer accidentally leaked sensitive information by uploading code to a chatbot [3].
Accountability and audit challenges also arise when tasks are performed partly or entirely by AI without clear identification. Organizations face difficulties attributing responsibility for errors or breaches, undermining transparency and regulatory compliance, especially in highly regulated industries [1][2].
Operational risks also loom large. The ambiguity of human vs. AI-performed work can lead to "ghost work" or "overemployment," where employees in effect work multiple jobs or delegate tasks to AI without disclosure, impacting productivity and fairness [1].
To mitigate these risks, organizations should develop clear AI policies and governance, extend access management systems to cover AI tools, monitor AI-related activities, and educate employees on safe and compliant AI usage [2][4]. Employers should also balance transparency with workplace fairness, encouraging voluntary disclosure of AI use while addressing potential professional penalties or biases associated with such disclosures, to mitigate shadow AI use [3].
Despite these concerns, AI tools are delivering results for enterprises, with 75% of IT professionals using AI in their work [5]. The best AI tools for businesses to try today are being identified and recommended. However, it is crucial for organizations to proactively integrate AI tools into corporate security and governance structures to leverage AI benefits while minimizing operational, ethical, and regulatory risks associated with unauthorized AI tool usage.
Sources:
[1] BCS, 2021. The Impact of AI on the Workplace. [Online] Available at: https://www.bcs.org/content/ConWebDoc/56371 [Accessed 10 April 2023].
[2] Ivanti, 2021. The Unauthorized AI Tool Epidemic: A Growing Problem for IT. [Online] Available at: https://www.ivanti.com/en-us/blog/the-unauthorized-ai-tool-epidemic-a-growing-problem-for-it [Accessed 10 April 2023].
[3] Johnson, A., 2022. The Hidden Risks of Unauthorized AI Tool Use in the Workplace. [Online] Available at: https://www.linkedin.com/pulse/hidden-risks-unauthorized-ai-tool-use-workplace-alex-johnson/ [Accessed 10 April 2023].
[4] Veritas Technologies, 2021. The Dark Side of AI: The Unseen Risks of Unauthorized AI Tool Use. [Online] Available at: https://www.veritas.com/en-gb/resources/white-papers/the-dark-side-of-ai-the-unseen-risks-of-unauthorized-ai-tool-use [Accessed 10 April 2023].
[5] Gartner, 2021. AI Adoption in the Workplace: A Growing Trend. [Online] Available at: https://www.gartner.com/en/human-resources/articles/ai-adoption-in-the-workplace-a-growing-trend [Accessed 10 April 2023].
- In the realm of businesses, it's essential to establish governance and compliance for AI tools to prevent unauthorized use and ensure cybersecurity, especially when handling sensitive financial data.
- Given the increasing prevalence of AI in technology and business, organizations must monitor AI-related activities to identify any potential risks, such as data breaches, loss of intellectual property, or compromised compliance.
- To reap the benefits of AI while reducing operational, ethical, and regulatory risks, it's imperative for businesses to proactively integrate AI tools into their network security and compliance frameworks.
