Issues are that large organisations don't have the skillsets for cloud and modern data privacy, let alone AI!
I kid you not - I've had to raise an objection at a security review that someone wanted to pull production PII data onto their laptop to 'analyse' the data. When I veto'd it, the fall out of we always allowed this in the past etc etc.. Another veto was a project that had a third party vendor who, as part of the integration to provide container controls, had to have full AWS access at org level and their code then managed the AWS instance from outside the organisation.. I kid you not on that either.
I get AI.. I get its pros and cons. Having been the guy accountable for things (including AI offered through the platform), it needs skills before you can run with it.
I'm more along the lines you're thinking. In our organization data protection is a constant battle between stopping dumb leaks, and pushing back against over restrictive policy's. Some of the people pushing for AI have no knowledge of the data they want to open up.
Last edited: