Did you know a lot of AI data leakage comes from well meaning employees? Time to update your acceptable use policy to include AI.

What is AUP (Acceptable Use Policy)?

An Acceptable Use Policy defines what an employee can and cannot do with company computers, social media accounts and other technologies. Every business should have an acceptable use policy for their employees. I have a template for my clients but this should be reviewed by your business legal counsel to make sure it covers your assets.

You should review and update your AUP every few years or so to include latest technologies and employee behaviour trends.

The AI part of your AUP

What should you add to AUP about AI? First, are there any authorized business uses for AI such as CoPilot or a note taking app? You should make it clear if you decide to authorize any AI use what software that is.

Second, make it clear to employees not to use “free” or unauthorized AI for business purposes. Make clear the danger of unauthorized AI slurping up business secrets and adding it to public databases. In under a month in 2023, Samsung lost serious IPP to employees using ChatGPT.

Third, make clear to employees what Multi-Factor authentication requirements are and make sure they are enforced.

Update your Acceptable Use Policy to include AI

Cover your business assets. Update your acceptable use policy to include AI.

Next steps? Provide computer security training (including the latest AI scams) for your employees.