Get NIST-y

·S2 E36

AI Policy After the Horse Has Already Left the Barn

September 8
18 mins

Episode Description

AI adoption happened before most clients wrote the rules. That does not make an AI policy useless. It changes the job from trying to stop AI to governing the tools already in use, training people to make better decisions, and protecting sensitive data.


Takeaways:

- Why governance, education, and security are the only realistic levers left

- How the data, platform, subscription tier, and vendor agreement determine whether a prompt is acceptable

- Why AI output still needs human validation, especially when the topic is unfamiliar


We answer:

- AI is already everywhere at our clients. Is it too late for a policy to help?

- How specific does AI training need to be before employees stop calling IT about every email and spreadsheet?


Make sure to follow the podcast or ask your own questions at:

https://blacksmithinfosec.com/nisty/

See all episodes