Director of Security Operations in Finance (non-banking), 5,001 - 10,000 employees
I don't think the data analysis has been done. I believe as an OSG, that's an Old Security Guy who's seen the cycle happen time in memorial, that the data is going to reflect that we do not yet understand the cost just as we didn't understand the cost of going to wireless, just as we didn't understand the cost of outsourcing, just as we didn't understand the true cost of offshoring. We've done this dance before for at least the past 20 years. I think we're going to run into the business ready-fire-aim cycle: Here's the newest toy, it slices, it dices, it creates, and everyone else has it so damn it I need to have it as well. The challenge I have is if we're not thoughtful about this one, at least a little bit, the potential to do harm is exponentially greater in my mind.VP, Director of Cyber Incident Response in Finance (non-banking), 10,001+ employees
This is a human element, but I think back to a group that was doing marketing and as a young incident responder I may have blocked access to a particular domain while we conducted an investigation into that domain. I was getting all sorts of phone calls and emails from marketing people saying, "Hey, they need access to this website because they need to be able to compare the ads in order to see what we're putting out as far as marketing is concerned." So, that was my first real view into unintended consequences of blocking a website that I didn't think had any business purpose: all of a sudden the marketing team wanted to see it. So that makes me wonder, "How are computers going to be able to do that?” And if we're blocking the computers from doing that, are we blocking them from being able to build an accurate model for whoever is trying to do that sort of comparison?CIO in Energy and Utilities, 11 - 50 employees
I would rather say "mitigate" more than "eliminate"... there's always an angle to be revised and perfected.It will certainly help to discover aspects or patterns not envisioned before, it's up to you how you prioritize and mitigate/take advantage of those discoveries.
Content you might like
Yes, AI has significantly reduced costs and improved customer experiences.4%
Somewhat, there have been some cost reductions and customer benefits, but there's room for improvement.81%
No, AI implementation has not yielded noticeable cost savings or substantial customer enhancements.11%
Not sure / I don't have enough information to assess AI's impact.4%
27 PARTICIPANTS
Head of Information and Data Analytics in Software, 5,001 - 10,000 employees
There is no doubt that AI and Machine Learning have had a tremendous impact on business. It fact, it is being applied to almost every industry there is. Here are some quick examples of how AI/ ML have created business ...read moreYes, we're actively using it38%
No, but it's part of our roadmap51%
No, and we have no plans to11%
Unsure0%
202 PARTICIPANTS
To be honest, I think they do aid in providing structure around the top but you have to be thoughtful about those principles. As technologists and as technology companies we've pushed this notion of minimal viable product, which is by default going to have minimal viable security and minimal viable privacy or compliance. It is like a race to the bottom, but NTSB teaches us all the time: speed kills. Should we be changing the vector instead of speed? Look at it as velocity because velocity is speed with direction. Which is why I like principles because if you have the principles then if you've done them right (codified them correctly and created the right culture) you're actually getting velocity not just speed.
I like the principles approach. If something happens and the company can say, "Well, here are the principles which we applied. Here are the controls that we put in place to actually make sure that we were moving towards our principles. In doing that this is why we did this. Stuff happened that we didn't expect to happen. Now that we know let's claw it back and do something else." I can be okay with that. If I have an understanding that you've done that upfront with a level of thoughtfulness and ethical directionality around it our consumer base is very forgiving and will be forgiving. But if we do the ready-fire-aim on this one and the harm gets to be huge, it's going to set us back.