Share these talks and lectures with your colleagues
Invite colleaguesPractice paper
A guide to evaluating AI vendors: Key questions to mitigate security risks
Cyber Security: A Peer-Reviewed Journal,
7
(4),
290-306
(2024)
Abstract
The proliferation of Generative AI (GenAI) marketing claims has thrust businesses into high-stakes decisions amid evolving societal attitudes towards emerging technologies. Exercising caution is paramount, however, given the prevalence of forward-looking assertions by nascent artificial intelligence (AI) vendors regarding future capabilities. This paper advocates for a pragmatic approach, underscoring the significance of tackling immediate safety concerns while manoeuvring through the realm of AI solutions. With insights gleaned from over five decades of AI evolution, the paper highlights the cyclical nature of AI’s allure and underscores the importance of drawing lessons from past cycles. It champions a methodical assessment of risks associated with adopting generative AI solutions, stressing the imperatives of transparency and accountability. A pivotal suggestion is to demand tailored AI solutions from vendors, ensuring that AI frameworks prioritise the welfare of data proprietors. The paper cautions against vendors putting their own interests before those of their clientele, urging readers to pose probing inquiries before committing to AI deployments. Ultimately, the paper endeavours to arm readers with the acumen and tools necessary to navigate the intricacies of AI vendor relationships. By furnishing actionable guidance on recognising and mitigating AI vendor risks, it endeavours to embolden businesses to innovate judiciously in the ever-evolving AI landscape.
Keywords: Generative AI; GPT chatbot; data ownership; ethics; risk assessment; governance
The full article is available to subscribers to the journal.
Author's Biography
Davi Ottenheimer , Vice President of Trust and Digital Ethics at Inrupt, brings a wealth of experience spanning over three decades in the field of information security. Widely respected for his innovative contributions to safety, Davi’s expertise is grounded in practical security management engineering and leadership. His invaluable insights have had a positive impact on numerous organisations and billions of users. With a focus on addressing crucial aspects of safe innovation, Davi’s writings and speeches offer invaluable guidance to organisations seeking to enhance their security posture amid complex technical and societal landscapes. His proficiency extends across diverse domains, including robotics, encryption key management, cloud infrastructure, threat intelligence and regulatory compliance.
