Microsoft 365 Copilot inherits all of Microsoft’s cloud security controls, but these were not designed for new AI capabilities. Security and risk management leaders must implement verifiable controls for AI data protection, privacy, and filtering of large language model content inputs and outputs. We just published Quick Answer: How to Make Microsoft...

Yesterday’s Congressional hearing on AI regulation was informative and there was bipartisan agreement on the need to regulate AI. But don’t hold your breath that anything will come out of it.  The U.S. government has done precious little to regulate AI. Barely any relevant legislation has come out of Congress. The Executive Branch has commissioned...

Web3 Blockchain brings new points of vulnerabilities for applications that use the technology. These are in addition to the vulnerabilities already present in Web 2.0 legacy systems that interface with it. All together we highlight 15 main points of vulnerability in our  upcoming report “How to Mitigate Web3 Blockchain Risks and Security Threats”...

We have all heard about the many risks posed by using ChatGPT. But what can you do about them? We just published “Quick Answer: How Can You Manage Trust, Risk and Security for ChatGPT Usage in Your Enterprise?” and dug into this question. Here are three key findings: 1. For out of the box ChatGPT usage (either Azure’s or OpenAI’s), have humans review...

In 2022 the main financial blockchain story involved corrupt crypto-billionaires going bankrupt, leaving a swath of investor destruction behind them. In 2023, the main theme on display at a Copper-organized Davos panel “The use of DLT in financial market infrastructure” was how blockchain can improve financial market efficiencies and operations. ...

Traditional identity and access management frameworks are no longer scalable, and commercial systems are at a breaking point for users.  We explore this subject in our just-published Predicts 2023: Users Take Back Control of Their Identities With Web3 Blockchain Various solutions – ranging from centralized password managers to federated identity management...