Artificial Intelligence & Machine Learning , Events , Governance & Risk Management

AI's Probabilistic Nature Demands New Security Framework

The fundamental nature of artificial intelligence is forcing organizations to rethink traditional cybersecurity governance frameworks as they grapple with technology that operates on probability rather than fixed rules.

See Also: Establishing a Governance Framework for AI-Powered Applications

This shift represents a significant challenge as enterprises must adapt their risk management strategies to address AI's unique characteristics. Unlike conventional software with clear "if-then" rules, AI's probabilistic nature introduces new complexities in security governance and ethical considerations.

"Many companies want to introduce AI either as a productivity tool for their staff, as a game changer for their software or as a value proposition for their company … What they don't fully recognize is that AI is not like normal software. AI is what we call probabilistic," said Gaurav Keerthi, head of advisory and emerging business at Ensign InfoSecurity. "Once you move from algorithmic software to probabilistic software, your traditional rules of governance don't apply anymore."

In this video interview with Information Security Media Group at the GovWare Conference and Exhibition 2024, Keerthi also discussed:

• How AI's probabilistic nature requires different governance approaches than traditional software;
• The challenges of balancing growth objectives with responsible AI implementation;
• The evolution of phishing attacks through AI-generated content and deepfakes.

Keerthi's advisory team helps organizations' boards and leadership navigate complex cybersecurity risks in their digital transformation. He previously served as deputy chief executive of Singapore's Cyber Security Agency and held senior positions in the Republic of Singapore Air Force.