At a glance
- Industry professionals say firms building out technology stacks and security strategies have to consider both how staff will use AI and how the firm is protected from it.
- For a practice deciding whether to let staff use AI, Vandre puts the control in staff culture rather than in the software.
- The National Security Agency said last week that a critical PHP patch had been released for public websites to use to avoid cyberattacks.
Hackers used artificial intelligence agents earlier this month to target more than 2,250 organizations subscribing to Microsoft 365 through the ConnectWise platform, according to PLANADVISER.
Industry professionals say firms building out technology stacks and security strategies have to consider both how staff will use AI and how the firm is protected from it. Matthew Vandre, director of digital services and a fiduciary financial planner at Francis LLC, said firms want staff using AI because it makes them more efficient, and that a powerful tool can do good or harm. "When we look at AI, we see it as a very powerful tool," he said.
For a practice deciding whether to let staff use AI, Vandre puts the control in staff culture rather than in the software. "The most important security control is not a piece of software," he said. "It's a culture where people understand that protecting data is part of their professional responsibility."
The National Security Agency said last week that a critical PHP patch had been released for public websites to use to avoid cyberattacks. The same week, the NSA, alongside the National Institute of Standards and Technology's Center for Advancing Innovation and Standard for Super Intelligence and the Cybersecurity and Infrastructure Security Agency, released guidance for organizations to prepare for or manage AI-related control incidents.
Reported by the Practice management desk from PLANADVISER. Published . Corrections