Has anybody explored / implemented a chatbot to help employees navigate information security policies and standards, be they business users, IT admins, DevSecOps people, etc.?

5GAugmented & Virtual Reality (AR/VR)
4.1k viewscircle icon3 Comments
Sort by:
CIO in Education2 years ago

Yes, we are using the Moveworks platform and have incorporated this into our internal enterprise search/FAQ/Knowledgebase.

Lightbulb on1
Global Chief Cybersecurity Strategist & CISO in Healthcare and Biotech2 years ago

Yes. On premise only and in a sandbox. Meaning that it has a defined location it can go and is pentested to test whether people can use it to go into areas they are not allowed. We actively monitor with DLP, there is an acceptable use policy, and zero tolerance if used beyond the scope - partnered with HR for that.

Lightbulb on3
Chief Information Security Officer in Healthcare and Biotech2 years ago

Yes. have implemented with our IT ticketing system to know more about the organization policies   

Lightbulb on1

Content you might like

Have you observed evidence of cybersecurity candidates using GenAI/AI agents in their job applications or interviews?

Yes - I’ve seen clear evidence of this38%

Yes - I strongly suspect some candidates used AI48%

No10%

Unsure/other5%

View Results

Any best practices your team follows when using AI solutions at work? Thinking of security tips, AI-generated content review, training, etc.

Read More Comments

We are looking for a solution to implement a chatGPT-like solution on premise? The solution should propose a GUI & back end components, ability to connect to LLM on prem and in the cloud (routing according to sensitivity of the data). Feature examples: questions to document/knowledge base, simple agent creation, RAG, and multimodal.

Read More Comments

Is employee self reporting reliable enough to measure value gains (or even time savings) from AI projects? If not, what’s your approach?

How do you compile and maintain a list of 3rd party software services being integrated in your code base by devs?

Developer and PM interviews, Google/Excel sheet27%

Formal process to OK any integration via Jira/ticketing - then list is created/maintained76%

No clean way - Look at traffic rom VPS, use NDR, sort unique domains38%

Custom tool - goes and finds API calls embedded in code magically6%

View Results