AI IMPLEMENTATION
2. What information is being entered? Determine whether company, tenant, employee, investor, or transaction information is moving into systems that haven’ t been reviewed.
3. Which uses create meaningful risk? Not every AI interaction deserves the same concern. Focus on situations involving information the organization is responsible for protecting.
4. What alternatives can you provide? Simply telling employees to stop using AI isn’ t a long-term strategy. Give them approved tools and clear boundaries.
DON’ T TURN DISCOVERY INTO ENFORCEMENT
If employees believe admitting to using AI will get them in trouble, management will learn very little. Ask employees what they’ re using, what they’ re using it for, and which repetitive tasks they’ re trying to eliminate. Those conversations may uncover risks, but they can also uncover opportunities. Shadow AI isn’ t only a cybersecurity problem. It can also map where employees believe existing business processes are inefficient.
AI ISN’ T THE PROBLEM. UNGOVERNED AI IS.
Commercial real estate shouldn’ t respond to AI by trying to stop it. The productivity opportunity is too significant. But adoption cannot be separated from governance. The question CRE leadership should be asking isn’ t“ Should we allow employees to use AI?” A better question is“ How are our employees already using AI, and do we have the appropriate controls around it?”
The CRE organizations that answer that question now will be better positioned to take advantage of AI without unnecessarily exposing their properties, tenants, investors, or businesses to risk.
Mike Mullin is President & CEO of Integrated Business Systems( IBS) and ProtectMyIT. He has more than three decades of experience helping businesses use technology while managing cybersecurity and operational risk.
973-575-4950 | ProtectMyIT. com
ProtectMyIT. com 11