Security's AI advantage will go to the organizations already built for accountability | Tech Radar
Overview
News, deals, reviews, guides and more on the newest computing gadgets
Start exploring exclusive deals, expert advice and more
Details
Unlock and manage exclusive Techradar member rewards.
Unlock instant access to exclusive member features.
Get full access to premium articles, exclusive features and a growing list of member rewards.
Security's AI advantage will go to the organizations already built for accountability
Accountability infrastructure, not speed, wins enterprise AI security
When you purchase through links on our site, we may earn an affiliate commission. Here’s how it works.
The enterprise race to scale AI operations is in full swing – both from a deployment and security perspective. While conventional wisdom suggests that the teams who deploy the models first get the edge, it’s the wrong approach for enterprises.
For nefarious actors, speed is the name of the game. Malicious actors leveraging AI to probe for vulnerabilities don’t need to share their decision trail to audit committees or regulators – making speed alone the key advantage for attackers.
Enterprise security teams, on the other hand, operate under entirely different parameters – which also happen to be where the opportunity lies.
Security teams don’t just need the capability to identify anomalies, screen transactions, or make access decisions – they also need to be prepared to explain what happened, when, and why to key stakeholders.
Every action and every outcome needs to be clarified and justified to a board, an auditor, or a customer.
The AI security paradox: Why are organizations trusting what they can’t fully see?
If everyone is rushing to board the AI ship why are so few workflows secure?
Secure AI will be defined by emulated human behavior
Scaling AI at the enterprise level is not relegated to who moves fastest, but rather who can embed the necessary accountability frameworks, emergency brakes, and audit trails.
In truth, speed is not the primary challenge for most enterprise teams. The bigger, more difficult challenge is found in data and governance. Policy models and detection frameworks are only as impactful as the information inputs. However, most organizations are devoid of structured, well-governed data – particularly as it pertains to AI activity. Across the majority of organizations, data is scattered.
Activity logs, access records, transaction histories all live in disparate systems with inconsistent formats and no single source of truth. No matter how much of this data is fed into an AI model, clarity will never be achieved. Instead, teams generate a false sense of confidence built upon a shaky foundation.
Meaningful scale begins with auditability and accountability as infrastructure, not an afterthought. As AI systems become increasingly embedded across organizations, the requirement heightens for more consistent records of actions that occurred and policy enforcement where actions are checked against defined rules prior to execution.
Equally as important, organizations need to have the internal muscle memory to explain automated decisions to stakeholders outside the engineering team, because they've been doing versions of this for years in compliance and risk functions.
How AI agents are wrecking havoc in legacy security setups and enterprises are catching up
Why AI auditability is what every security leader should be talking about
If AI transparency rules weaken, enterprise tech teams will inherit the risk
When this approach is foundational for enterprises, AI systems become genuinely useful. AI models built upon strong data and governance standards can meaningfully screen actions against known risks before settlement, flag patterns that humans may have missed, and maintain updated records that can be shared across key stakeholder groups. Devoid of this foundation, fragmented data and ungoverned systems compound – resulting in faster mistakes.
Enthusiasm around AI systems centers on the deployment side of the equation, without asking whether the underlying infrastructure can support what's being layered on top of it. This approach is suboptimal and leaves an open door for breaches – akin to installing an alarm system in a building without putting locks on the doors.
Embedding infrastructural policy enforcement, audit trails, and human-reviewable records does bring an additional layer prior to deployment. And in a domain where nefarious actors operate free of this operational layer, it's fair to ask whether enterprise security teams are creating a permanent speed disadvantage for themselves.
However, that mindset misses what the added operational layer actually delivers: the difference between an AI system that fails safely and one that fails silently.
Enterprise security teams who operate slower but can consistently and proactively identify and reverse bad decisions are in a fundamentally different position than enterprises who operate quickly and discover a failure three weeks post-incident. The tradeoff is real, but it’s the wrong tradeoff to optimize away.
A common misconception is that security decisions are made for and by security teams. That’s not the case. Security decisions made by automated systems need to satisfy stakeholders far outside of this workstream – including regulators, insurers, customers, even boards.
Those stakeholders aren’t moved by sophistication. They care whether the organization can clearly and consistently demonstrate what the system did and why. Organizations without that operational layer find that AI adoption increases their potential risk exposure, because they're now making faster decisions with insufficient guardrails.
As AI systems continue to increasingly exhibit autonomous behaviors, the stakes continue to change. An AI system that can initiate payments, approve transactions, or move funds independently doesn't just need a policy to follow – it needs brakes to press in the event of a bad decision.
Without this layer embedded, enterprise security teams not only carry the accountability problem – they also have no chance of catching a mistake before it becomes permanent.
Readiness requires the proper sequencing. Before scaling AI operations, it’s critical to make an honest assessment of three things: whether underlying data across systems are structured, whether there are firm policy checks in place, and whether verifiable records of automated decisions can be produced on-demand.
Starting here positions AI to become a force multiplier for security teams. These three elements make all the difference between catching what humans miss and doing it fast enough to matter – or simply adding velocity to a faulty process.
The “AI race” will not be won by having the newest models. Really, it’s about devoting effort to the unglamorous work – building the data infrastructure and governance systems that make AI models trustworthy.
We've reviewed, rated, and ranked the best firewall software.
This article was produced as part of Tech Radar Pro Perspectives, our channel to feature the best and brightest minds in the technology industry today.
The views expressed here are those of the author and are not necessarily those of Tech Radar Pro or Future plc. If you are interested in contributing find out more here: https://www.techradar.com/pro/perspectives-how-to-submit
You must confirm your public display name before commenting
Garmin Fenix 9 details leak, and if true, we're getting three new watches — but the most interesting part of this reveal is about Garmin's screen technology
Microsoft quietly stops recommending 32GB of RAM, as even Apple reportedly struggles to secure memory for i Phones and Mac Books
Don't tell Tim Cook, but Apple's M5 Mac Book Pro 14-inch just got a price cut at Amazon
Buggy microcontrollers making up some of the world's most important servers can be easily backdoored
We could finally be getting the next GTA 6 trailer as Rockstar announces a special 'extended look' that will premiere on... Netflix?
Tech Radar is part of Future US Inc, an international media group and leading digital publisher. Visit our corporate site.
© Future US, Inc. Full 7th Floor, 130 West 42nd Street, New York, NY 10036.
Key Takeaways
- News, deals, reviews, guides and more on the newest computing gadgets
- Start exploring exclusive deals, expert advice and more
- Unlock and manage exclusive Techradar member rewards
- Unlock instant access to exclusive member features
- Get full access to premium articles, exclusive features and a growing list of member rewards
