Skip to Content
View all events

Shadow AI

Published by Pearson

Beginner to intermediate content levelBeginner to intermediate

Combating Shadow Artificial Intelligence without Impacting Productivity

  • Assess the risks of Shadow AI and potential impacts to your organization.
  • Explore methods for identifying Shadow AI and adopting mitigation policies.
  • Learn through hands-on use cases and see real-world workflows.

Misuse of AI can lead to training models on your sensitive data, exposure of sensitive data, and unwanted actions occurring within the organization. AI is changing our world, and every organization is struggling to keep up with the speed of adoption. Employees are just using AI without thinking about the risk of data loss, compliance issues, and possible ethical violations. Organizations need “deny first” policies that only allow validated and approved AI in a secure manner. This concerns every aspect of the organization, from collaboration to building technology.

This 4-hour training will provide the knowledge you need to assess your organization’s risks but also supply real-world examples for how to build AI policies and enforce responsible adoption of AI. Also included are methods for identifying, evaluating, and provisioning AI with little disruption in business operations. Expect a blend of business and tactical technical recommendations.

What you’ll learn and how you can apply it

  • How to develop and enforce an AI adoption policy based on your business objectives
  • How to control AI adoption to only approved technology and acceptable usage
  • How to evaluate AI to add or remove it from your approved list of AI technology
  • Examples of where AI is showing up and how organizations are adopting

This live event is for you because...

  • Your organization is enthusiastic about the potential of AI, but you need to ensure its adoption doesn't lead to security, compliance, or ethical issues.

Prerequisites

  • Basic knowledge of AI and security technology
  • Basic understanding of “generative AI” and how users interact with this technology

Recommended Preparation

Recommended Follow-up

Schedule

The time frames are only estimates and may vary according to how the class is progressing.

Segment 1: Introduction to AI within your organization (30 minutes)

  • Different flavors of AI
  • Collaboration and productivity tools
  • Code development tools
  • AI built within tools
  • Other AI innovations
  • Where AI is showing up within your organization (internally sanctioned AI vs. external shadow AI)
  • Risks of shadow AI
  • Data loss, compliance, vulnerabilities, etc.
  • Q&A

Segment 2: Evaluating AI (30 minutes)

  • Responsible AI
  • AI deployment and usage models
  • Monolithic vs compound AI models
  • Building vs buying AI
  • RAG vs API
  • AI and data sovereignty
  • Q&A

Break (10 mins)

Segment 3: Identifying Shadow AI (30 minutes)

  • Tools and tech that can identify Shadow AI – logging, telemetry, and different detection methods
  • Technology options include CASB, endpoint detection, application layer firewalls, WAFs, SASE, etc.
  • Shadow AI applications
  • Shadow AI agents
  • Developing AI usage reports to fund your shadow AI defense program
  • Q&A

Segment 4: Provision AI Responsibility (30 minutes)

  • Executing an approved AI technology list
  • Monitoring and adopting policies
  • Use cases for exception lists and targeted deployments
  • Q&A

Break (10 mins)

Segment 5: Monitoring Compliant usage within AI (25 minutes)

  • Controlling authentication to AI
  • Advanced hunting and usage analysis
  • Sensitive data protection in AI
  • Q&A

Segment 6: Adopting Advanced AI Use Cases (25 minutes)

  • Dealing with change in AI technology
  • Adopting automation
  • Introducing agentic workflows
  • Maintaining compliance and regulation
  • Q&A

Course wrap-up and final Q&A (10 minutes)

  • What’s next with AI?
  • Wrap up

Your Instructors

Joseph Muniz

Joseph Muniz is a renowned security expert and security artificial intelligence specialist at Microsoft. With a passion for making the world a safer place, he is dedicated to promoting education and research on adversary tactics. Joseph has over two decades of experience designing security solutions and architectures for Fortune 500 companies and the US Government, serving as a trusted advisor. He is a researcher and thought leader in the industry, regularly speaking at international conferences and contributing to technical magazines. Joseph also develops training for various industry certifications, and has invented the fictitious character of Emily Williams to raise awareness of social engineering. As the founder of thesecurityblogger.com, Joseph has created a valuable resource for security and product implementation. He is the author and contributor of several publications, ranging from security best practices to exploitation tactics. His latest title, The Modern Security Operations Center, was released in 2021 and is his tenth publication. Follow Joseph’s work on Twitter at @SecureBlogger.

linkedinXlinksearch

Jesse Silver

Jesse Silver has worked for Microsoft as a Senior Security Technical Specialist since 2023, after an enriching 8-year tenure with Microsoft partners serving as a practice director, architect, consultant, and more. He carries 8 Microsoft certifications and dozens of competencies, speaking engagements, webinars, and articles covering the gamut of cybersecurity, Zero Trust, modern work, data governance + protection, and program management. From his humble beginnings as an IT Consultant in the San Francisco Financial District, he has been able to work with a multitude of industries and organizations that have shaped his professional aptitude for the human side of technology adoption. Outside of his professional life, Jesse enjoys a vibrant life with his wife and 8-year-old son in Estes Park, Colorado. His hobbies include camping, hiking/backpacking, fishing, paddle boarding, evolutionary biology, science fiction, EDC collecting, and scuba diving. Jesse's household also includes three pampered cats who are blissfully unaware of their spoiled status.

Skill covered

Generative AI