Have you implemented any AI-enabled solutions, and if so, how do you assess their value?

We have implemented security solutions with AI enabled in them, but the evaluation was not based on having AI as a feature but rather how the solution performed against success criteria for the sought after capability.  Security tools that provide reliable asset and risk visibility, actionable insights and give context to findings are generally very useful because they remove steps that a human would have to take to produce the same level and quality of information.  In today's landscape, AI can be used as a sales buzzword and not all applications of AI technology provide the same value.   For existing vendors that add AI features, it helps to take an existing use case that you can use as a measure for effectiveness.

Yes, we have integrated AI capabilities into tools we already owned, which were updated by vendors to include AI functionalities. Our focus is on evaluating these tools to see if they genuinely deliver value by reducing noise and providing actionable data. I am particularly interested in how these tools can be applied to quantified risk management, where they might enhance our ability to assess and manage risks based on comprehensive data analysis.