AI Security Diagnostic

Executive Leadership (CEO, COO, President)

Technology Leadership (CTO, VP Engineering, Head of IT)

Product/Innovation (CPO, VP Product, Innovation Lead)

Operations (Operations Manager, Director of Ops)

Data/Analytics (Data Lead, Analytics Manager)

Engineering/Development (Engineer, Developer, Technical Lead)

Compliance/Legal/Risk (Compliance Officer, Legal, Risk Manager)

Marketing/Sales (CMO, Marketing Director, Sales Leader)

Finance (CFO, Controller, Finance Manager)

HR/People Ops (CHRO, HR Director, People Ops)

Customer PII (names, emails, addresses, phone numbers)

Financial records (credit cards, bank accounts, transaction history)

Health information (patient records, medical history, PHI)

Employee records (SSNs, compensation, performance reviews)

Legal documents (contracts, litigation, privileged communications)

None of the above (we primarily handle non-sensitive data)

NIST AI RMF (AI Risk Management Framework)

Financial services regulations (SEC, FINRA, etc.)

Our data being used to train public AI models

Compliance violations or regulatory issues

Don't know what security protections exist

Employees using AI without proper oversight (shadow AI)

Lack of internal expertise to implement safely

What are your main concerns about using AI in your business?

Yes, with IT/security approval (we have sanctioned tools)

We're already using AI and want to expand safely