AI Security Essentials for Business Leaders

Thanks to Women in Cybersecurity, I was very lucky to win an opportunity to take the new SANS course, AIS247: AI Security Essentials for Business Leaders. It was a good balance of high-level overview with just enough tech to make it interesting. For example, I really appreciate the insight into LLMs as being big giant statistics calculators making probability calculations on tokens...aka, "which word (token) is the next best choice?"! Cool beans!

Here are my major takeaways:

1. First and foremost, develop a policy! Put together a committee and develop definitions, guiding principles, and ethics/appropriate use guidelines.

2. Conduct an AI inventory. Just like any other aspect of security, you can't manage what you don't know you have!

3. Finally, (and my favorite for sure) TRAIN YOUR PEOPLE. Ahhh, music to this girl's ears. Developing policies and guidelines means nothing to changing human behavior. Driving safe and secure behavior can only come from smart, targeted training that helps employees/students/members understand how to be safe and secure. This is for their protection as well as that of the organization.

Anyways, for a quick overview course, I found it was worth waking up a bit early and squeezing in 90 minutes of learning!