Taking Control of AI & the Tools Nobody Approved

Staff are already using generative AI, built-in assistants, browser extensions and AI-enabled apps, often without anyone formally approving them. This recorded session from CyberOne looks at how to get visibility of that shadow AI use and turn it into a governed strategy rather than a free-for-all.

It covers identifying which AI tools and features are actually in use, assessing how they interact with sensitive data, identities, permissions and third-party apps, applying proportionate controls to the riskiest activity without shutting down productivity, strengthening governance and data protection, and turning successful experiments into repeatable, measurable business capabilities.

One of the presenters is a Microsoft 365 security specialist, so expect the practical side to lean towards Microsoft tooling.