Cybersecurity and whitelisting AI tools

About the webinar

AI tools have spread through organizations faster than most of them could set up rules. People use them to work with company data, often through accounts that management doesn't know about. This creates a problem that concerns not only security, but also accountability and regulatory compliance.

Cyber Security Act (under NIS2) requires you to have an overview of your assets and to manage supply chain risks – and a cloud AI tool is a supplier like any other. The AI Act adds its own obligations on top of that, depending on what you use the tool for. Whitelisting – that is, deciding which tools are allowed and under what conditions – is where these requirements meet in practice.

In the webinar, we'll show how to approach this so that you have control over what's used in the company while also meeting your regulatory obligations – without banning AI across the board.

Agenda

• AI and cybersecurity: what the Cybersecurity Act requires of you and where the AI Act comes into play.
• The AI tool as a supplier: why to address it as part of supply chain management and what to verify about it.
• Basic rules for approving and using AI: how to assess tools, who decides on them, and how to document the decision.
• Shadow AI: how to find out what people are using and what to do with unauthorized tools.
• Responsibilities and process: who should have the final say in the company and how to connect it to existing security processes.