Done a supplier questionnaire on AI. 95% of my responses were: "We're not going to do anything different because our existing controls already cover this... "
Without the heavily sarcastic; "Because somebody researched, studied and spoke with other security people about this."
all this talk of stuff recently just feels a bit insane:
> People who think AI is alive..
> People who think the world is ending
> People who think computers are magic
> People who can't copy if you don't say AI is going to kill us all
> People that don't understand risk management requires doing actual science (and knowing how computers work)
> AI Safety LARPS
> Cyber people grifting off the back of AI hype
> Random people doing insanely unsafe/insecure stuff with LLMs
> > > and so much more!
It's a bloody mad house (LOL)