Why SaaS AI Governance Should Be on Every CISO's Agenda
Summary: A recent survey cited in this article found that 95% of U.S. businesses now use generative AI, up sharply from the prior year, as assistants appear in Zoom, Slack, Microsoft 365, and Salesforce. The article points to Samsung engineers leaking sensitive code to ChatGPT, Italy's regulators briefly banning ChatGPT over privacy violations, and NASA and the Navy blocking DeepSeek, whose privacy policy allows user data to be sent to servers in China.
Bottom line: Over half of U.S. workers already use GenAI tools at work without IT's approval, so any governance plan built on the assumption that employees will ask first is starting from a false premise. The Samsung leak and the DeepSeek blocks show the exposure is concrete: proprietary code leaving the building and data landing under Chinese law, not hypothetical policy risk.
Read the original at The Hacker News ↗
- Topics
- Governance, Risk & Compliance
- Related
- Upcoming Speaking Engagements Cyber Risks · Nov 14, 2026Friday Squid Blogging: Pacific Flying Squid Populations Dropping in Korean Waters Cyber Risks · Nov 13, 2026AI Doesn’t Have to Go Rogue to Break the World Cyber Risks · Nov 13, 2026