When this question comes up in a workshop, the room usually goes quiet for a moment.
An old topic suddenly becomes urgent
With AI models, information security becomes more urgent than ever. Every AI tool is a new place where information flows: offers, personnel data, draft contracts, customer lists.
It is not only about technology
It is also about organization:
- Who has access to what?
- Which data needs special protection?
- Which tools are approved?
- And what happens if something does go wrong?
These are exactly the questions an information security management system according to ISO 27001 answers. If you have one, build AI tools into it. If you don’t, you at least need clear answers to these questions. I described how AI models themselves can help with the preparation in “ISO 27001 preparation: from five weeks to two hours?”.
3 questions for a self-check
- Do you know which of your data must never go into an AI tool?
- Is it clear who approves new tools in your company?
- Could you show your customers within a week how you protect their data?
That’s the end of the series
Direction, processes, rules and security: once these 4 points are clarified, AI models really arrive in everyday work. And you can use them much more boldly. 🔐
The series: What comes before the AI tool
- Part 1 · Kick-off: Why the tool is the easiest part
- Part 2 · Strategy & organization: Where should AI models take us as a company?
- Part 3 · Processes: Which processes should actually get better?
- Part 4 · Rules & compliance: What is the team allowed to do with AI tools, and what not?
- Part 5 · Information security: What happens to our data along the way? (this post)
A question for you
Which of the 4 points is still most open for you: direction, processes, rules or security?