Jun 03 2026

Building AI Governance That Actually Works: From Ethics to the Exam Room

Category: AI Governance,Information Securitydisc7 @ 10:02 am

Below is the HTML format of our post. Click to view it in a separate window

Four risks, three frameworks, and what real-world mapping across ISO 27001, ISO 42001, and NIST 800-53 Rev. 5 actually looks like

The AI Governance Quick-Start: Defensible in 10 Days, Not 4 Quarters

DISC InfoSec is an active ISO 42001 implementer and PECB Authorized Training Partner specializing in AI governance for B2B SaaS and financial services organizations.

AI Attack Surface ScoreCard

AI Vulnerability Scorecard: Discover Your AI Attack Surface Before Attackers Do

Your Shadow AI Problem Has a Name-And Now It Has a Score

Most AI Security Tools Won’t Pass an Audit. Here’s a 15-Minute Way to Find Out.

AIMS and Data Governance – Managing data responsibly isn’t just good practice—it’s a legal and ethical imperative

Schedule a consultation or drop a note below: info@deurainfosec.com

InfoSec services | InfoSec books | Follow our blog | DISC llc is listed on The vCISO Directory | ISO 27k Chat bot | Comprehensive vCISO Services | ISMS Services | AIMS Services | Security Risk Assessment Services | Mergers and Acquisition Security

Tags: AI Ethics, AI Governance


Apr 01 2025

Things You may not want to Tell ChatGPT

Category: AI,Information Privacydisc7 @ 8:37 am

​Engaging with AI chatbots like ChatGPT offers numerous benefits, but it’s crucial to be mindful of the information you share to safeguard your privacy. Sharing sensitive data can lead to security risks, including data breaches or unauthorized access. To protect yourself, avoid disclosing personal identity details, medical information, financial account data, proprietary corporate information, and login credentials during your interactions with ChatGPT. ​

Chat histories with AI tools may be stored and could potentially be accessed by unauthorized parties, especially if the AI company faces legal actions or security breaches. To mitigate these risks, it’s advisable to regularly delete your conversation history and utilize features like temporary chat modes that prevent the saving of your interactions. ​

Implementing strong security measures can further enhance your privacy. Use robust passwords and enable multifactor authentication for your accounts associated with AI services. These steps add layers of security, making unauthorized access more difficult. ​

Some AI companies, including OpenAI, provide options to manage how your data is used. For instance, you can disable model training, which prevents your conversations from being utilized to improve the AI model. Additionally, opting for temporary chats ensures that your interactions aren’t stored or used for training purposes. ​

For tasks involving sensitive or confidential information, consider using enterprise versions of AI tools designed with enhanced security features suitable for professional environments. These versions often come with stricter data handling policies and provide better protection for your information.

By being cautious about the information you share and utilizing available privacy features, you can enjoy the benefits of AI chatbots like ChatGPT while minimizing potential privacy risks. Staying informed about the data policies of the AI services you use and proactively managing your data sharing practices are key steps in protecting your personal and sensitive information.

For further details, access the article here

DISC InfoSec’s earlier post on the AI topic

What You Are Not Told About ChatGPT: Key Insights into the Inner Workings of ChatGPT & How to Get the Most Out of It

Digital Ethics in the Age of AI – Navigating the ethical frontier today and beyond

InfoSec services | InfoSec books | Follow our blog | DISC llc is listed on The vCISO Directory | ISO 27k Chat bot | Comprehensive vCISO Services | ISMS Services | Security Risk Assessment Services

Tags: AI Ethics, AI privacy, ChatGPT, Digital Ethics, privacy