Truth in IT
    • Sign In
    • Register
        • Videos
        • Channels
        • Pages
        • Galleries
        • News
        • Events
        • All
Truth in IT Truth in IT
  • Data Management ▼
    • Converged Infrastructure
    • DevOps
    • Networking
    • Storage
    • Virtualization
  • Cybersecurity ▼
    • Application Security
    • Backup & Recovery
    • Data Security
    • Identity & Access Management (IAM)
    • Zero Trust
    • Compliance & GRC
    • Endpoint Security
  • Cloud ▼
    • Hybrid Cloud
    • Private Cloud
    • Public Cloud
  • Webinar Library
  • TiPs
  • DRAW
  • CPE

Fortinet: Managing Shadow AI Risks in Enterprise Security Operations

Fortinet
06/30/2026
0 (0%)
Share
  • Comments
  • Download
  • Transcript
Report Like Favorite
  • Share/Embed
  • Email
Link
Embed

Transcript


that they're monitoring and understanding and getting visibility into. Using that term where you have employees within the organization who are not using perhaps the authorized or sanctioned generative AI tool, but instead going ahead and potentially putting data that might have personal information, for example. And it's certainly something an organization wouldn't want their intellectual property or personal data to be uploaded into a generative AI tool. But needing to monitor the organization to make sure that that isn't happening and that perhaps blocking access to a more generic tool and steering employees towards the enterprise sanctioned version of that. Because employees definitely are looking for things that are going to make their lives easier.

TL;DR

  • Generative AI represents a new attack surface that security operations teams must actively monitor and govern within their organizations.
  • Shadow AI usage—employees using unauthorized AI tools—poses significant risks of intellectual property and personal data exposure.
  • Effective mitigation requires both blocking generic AI tools and providing sanctioned enterprise alternatives that meet employee productivity needs.

Summary

This SecOps Summit segment addresses the emerging security challenge of generative AI as a new attack surface requiring organizational monitoring and governance. The discussion highlights the phenomenon of shadow AI, where employees bypass sanctioned enterprise tools to use unauthorized generative AI applications, potentially exposing sensitive data including personal information and intellectual property. The speakers emphasize that security operations teams must implement visibility controls to detect when corporate data is being uploaded to generic AI tools, while simultaneously providing employees with approved alternatives that meet their productivity needs. The key insight is that blocking alone is insufficient—organizations must understand that employees are seeking efficiency gains and should steer them toward enterprise-sanctioned AI solutions that balance usability with data protection requirements. This represents a shift in SOC responsibilities from traditional threat monitoring to include governance of emerging AI-related data exposure risks.

Chapters

0:00 - Gen-AI as Attack Surface
0:14 - Shadow AI Data Risks
0:49 - Steering to Sanctioned Tools

Key Quotes

0:00 "I would consider Gen-AI to be another attack surface that an organization needs to make sure that they're monitoring and understanding and getting visibility into."
0:34 "It's certainly something an organization wouldn't want their intellectual property or personal data to be uploaded into a generative AI tool."

FAQ

What is shadow AI and why is it a security concern?

Shadow AI refers to employees using unauthorized or unsanctioned generative AI tools instead of enterprise-approved solutions. This creates security risks because employees may inadvertently upload sensitive data, personal information, or intellectual property to external AI platforms that the organization cannot monitor or control.


Categories:
  • » Webinar Library » Fortinet
  • » Cybersecurity » Data Security
  • » Data Protection
Channels:
News:
Events:
Tags:
  • AI & Machine Learning
  • Security Operations
  • Data Privacy
  • Compliance & Governance
  • Executive Briefing
  • Generative AI Security
  • Shadow AI
  • Data Loss Prevention
  • AI Governance
  • Enterprise AI Policy
  • Intellectual Property Protection
Show more Show less

Browse videos

  • Related
  • Featured
  • By date
  • Most viewed
  • Top rated
  •  

              Video's comments: Fortinet: Managing Shadow AI Risks in Enterprise Security Operations

              How secure is your Microsoft enterprise? Under 5 minutes, earn $10 in TruthPoints.

              View CPE Certificates

              Upcoming 360 View Events

              • Nov
                19

                Securing the Microsoft Enterprise: Strengthening Configuration Management, Identity Security, and Data Protection

                11/19/202601:00 PM ET
                More events

                Industry Events (Sponsor Hosted)

                • Nov
                  18

                  Hands-On Workshop: Connecting On-Prem Data to Databricks via MinIO AIStor (International)

                  11/18/202608:00 AM ET
                  • Nov
                    19

                    Zendesk Deep Dive: Get the work done faster with Employee Service AI Agents

                    11/19/202601:00 PM ET
                    • Nov
                      19

                      AI Agent Showdown: Discover What Muse, Dots, and Duet Bring to Your Website

                      11/19/202601:00 PM ET
                      • Dec
                        02

                        Skylight en acción: salvaguardando la IA más allá del usuario.

                        12/02/202604:00 AM ET
                        • Dec
                          03

                          CISO Insights: Steering Cybersecurity Strategies in an AI-Driven Era

                          12/03/202601:00 PM ET
                          More events

                          Upcoming Webinar Calendar

                          • 11/18/2026
                            08:00 AM
                            11/18/2026
                            Hands-On Workshop: Connecting On-Prem Data to Databricks via MinIO AIStor (International)
                            https://www.truthinit.com/index.php/channel/2194/hands-on-workshop-connecting-on-prem-data-to-databricks-via-minio-aistor-international/
                          • 11/19/2026
                            01:00 PM
                            11/19/2026
                            Securing the Microsoft Enterprise: Strengthening Configuration Management, Identity Security, and Data Protection
                            https://www.truthinit.com/index.php/channel/2076/securing-the-microsoft-enterprise-strengthening-configuration-management-identity-security-and-data-protection/
                          • 11/19/2026
                            01:00 PM
                            11/19/2026
                            Zendesk Deep Dive: Get the work done faster with Employee Service AI Agents
                            https://www.truthinit.com/index.php/channel/2181/zendesk-deep-dive-get-the-work-done-faster-with-employee-service-ai-agents/
                          • 11/19/2026
                            01:00 PM
                            11/19/2026
                            AI Agent Showdown: Discover What Muse, Dots, and Duet Bring to Your Website
                            https://www.truthinit.com/index.php/channel/2228/ai-agent-showdown-discover-what-muse-dots-and-duet-bring-to-your-website/
                          • 12/02/2026
                            04:00 AM
                            12/02/2026
                            Skylight en acción: salvaguardando la IA más allá del usuario.
                            https://www.truthinit.com/index.php/channel/2147/skylight-en-acción-salvaguardando-la-ia-más-allá-del-usuario/
                          • 12/03/2026
                            01:00 PM
                            12/03/2026
                            CISO Insights: Steering Cybersecurity Strategies in an AI-Driven Era
                            https://www.truthinit.com/index.php/channel/2231/ciso-insights-steering-cybersecurity-strategies-in-an-ai-driven-era/
                          • 01/19/2027
                            04:00 AM
                            01/19/2027
                            Skylight in Aktion: Gewährleisten Sie KI-Schutz über den Benutzer hinaus
                            https://www.truthinit.com/index.php/channel/2176/skylight-in-aktion-gewährleisten-sie-ki-schutz-über-den-benutzer-hinaus/
                          • 01/19/2027
                            02:00 PM
                            01/19/2027
                            HUMAN Dialogue: Embracing the Rise of the Empowered AI Consumer.
                            https://www.truthinit.com/index.php/channel/2160/human-dialogue-embracing-the-rise-of-the-empowered-ai-consumer/
                          • 03/18/2027
                            01:00 PM
                            03/18/2027
                            Securing Access for People, Partners and AI Agents
                            https://www.truthinit.com/index.php/channel/2251/securing-access-for-people-partners-and-ai-agents/
                          • 06/17/2027
                            01:00 PM
                            06/17/2027
                            Stop the Leak: Data Loss Prevention for the AI Era
                            https://www.truthinit.com/index.php/channel/955/360view-stop-the-leak-data-loss-prevention-for-the-ai-era/
                          • 08/19/2027
                            01:00 PM
                            08/19/2027
                            Who Has Access to What...and Should They?
                            https://www.truthinit.com/index.php/channel/2252/who-has-access-to-what-and-should-they/
                          • 10/21/2027
                            01:00 PM
                            10/21/2027
                            After VMware: Building the Private Cloud You Actually Want
                            https://www.truthinit.com/index.php/channel/2253/after-vmware-building-the-private-cloud-you-actually-want/
                          • 11/18/2027
                            01:00 PM
                            11/18/2027
                            Assume Breach, Prove Recovery
                            https://www.truthinit.com/index.php/channel/2254/assume-breach-prove-recovery/
                          • 12/16/2027
                            01:00 PM
                            12/16/2027
                            The Self-Running Service Desk
                            https://www.truthinit.com/index.php/channel/2255/the-self-running-service-desk/
                          Truth in IT
                          • Sponsor
                          • About Us
                          • Terms of Service
                          • Privacy Policy
                          • Contact Us
                          • Preference Management
                          Desktop version
                          Standard version