Artificial Intelligence
Webinar: Out of the Shadows: Can We Make Shadow AI Secure by Default?
AI is already part of everyday work. Employees use it to summarize documents, write code, translate text, and analyze information. Much of that use is legitimate and useful. Problems arise when employees turn to tools that sit outside approved corporate environments, leaving organizations with limited visibility over what is being used, what data is being shared, and what those tools can access or do.
On November 5, the Charter of Trust brought together experts from cybersecurity, enterprise risk, and technology to discuss how companies can manage Shadow AI without shutting down useful AI adoption.
Moderated by Friso Jankowsky (Atos), the panel featured Sudhir Ethiraj (TÜV SÜD), Tony Fergusson (Zscaler), Haydn Griffiths (Allianz Commercial), Scott Kannry (Axio), and Andy Schneider (Palo Alto Networks).
A clear message emerged: Shadow AI is often driven by unmet business demand. If approved tools are too limited, slow, or difficult to use, employees will look for alternatives.
The discussion highlighted four priorities:
- Make secure AI the easier option. Blanket bans can push AI use further into the shadows.
- Control data, access, and actions. AI agents should only see the information and perform the functions they need.
- Build security in from the start. Security by Default means clear guardrails, protected data flows, and defined recovery mechanisms.
- Prepare for faster incidents. AI can increase the speed and scale of both attacks and operational failures, making resilience and crisis preparedness more important.
The conclusion was not to slow AI adoption to a halt, but to make it safer through trusted tools, clear boundaries, and better preparation.
Thank you to everyone who joined the discussion. A recording of the webinar can be found at the bottom of this page.