Fortinet: Managing Shadow AI Risks in Enterprise Security Operations

Name: Fortinet: Managing Shadow AI Risks in Enterprise Security Operations
Uploaded: 2026-06-30T11:12:15-04:00
Duration: 1 min 17 s
Description: Increasingly complex networks ultimately give attackers more blind spots to hide their efforts. Join our recent #SecOps Summit as Michelle Abraham (Industry Analyst) and #Fortinet's Chris Borales, as they discuss how #AI-powered tools are used by secu...

Fortinet

06/30/2026

0 (0%)

Report Like Favorite

TL;DR

Generative AI represents a new attack surface that security operations teams must actively monitor and govern within their organizations.
Shadow AI usage—employees using unauthorized AI tools—poses significant risks of intellectual property and personal data exposure.
Effective mitigation requires both blocking generic AI tools and providing sanctioned enterprise alternatives that meet employee productivity needs.

Summary

This SecOps Summit segment addresses the emerging security challenge of generative AI as a new attack surface requiring organizational monitoring and governance. The discussion highlights the phenomenon of shadow AI, where employees bypass sanctioned enterprise tools to use unauthorized generative AI applications, potentially exposing sensitive data including personal information and intellectual property. The speakers emphasize that security operations teams must implement visibility controls to detect when corporate data is being uploaded to generic AI tools, while simultaneously providing employees with approved alternatives that meet their productivity needs. The key insight is that blocking alone is insufficient—organizations must understand that employees are seeking efficiency gains and should steer them toward enterprise-sanctioned AI solutions that balance usability with data protection requirements. This represents a shift in SOC responsibilities from traditional threat monitoring to include governance of emerging AI-related data exposure risks.

Chapters

0:00 - Gen-AI as Attack Surface
0:14 - Shadow AI Data Risks
0:49 - Steering to Sanctioned Tools

Key Quotes

0:00 "I would consider Gen-AI to be another attack surface that an organization needs to make sure that they're monitoring and understanding and getting visibility into."
0:34 "It's certainly something an organization wouldn't want their intellectual property or personal data to be uploaded into a generative AI tool."

FAQ

What is shadow AI and why is it a security concern?

Shadow AI refers to employees using unauthorized or unsanctioned generative AI tools instead of enterprise-approved solutions. This creates security risks because employees may inadvertently upload sensitive data, personal information, or intellectual property to external AI platforms that the organization cannot monitor or control.

Categories:

Tags:

Show more Show less

TL;DR

Summary

Chapters

Key Quotes

FAQ

Becoming Agent Ready with Cyera: Essential Strategies and Insights

Verge.io: Can You Afford Your Next Storage Refresh?

Summer of Satori: FunFoneFarm's Transformation of Fraud into Seamless Integration