CHRISTOS KALANTZIS , CHIEF TECHNOLOGY OFFICER , SECURITYSCORECARD

rtificial Intelligence ( AI ) has

Here are several best practices for TMTs when it comes to combatting AI threats :

Identify and catalog your attack surface

You can ’ t protect what you don ’ t know about . TMTs tend to have an outsized amount of digital assets compared to more traditional sectors , making their attack surfaces larger and more attractive to threat actors using AI . As a result , TMTs must have a complete ( or close-to-complete ) understanding of their attack surface in terms of devices , services , employees and software in use .

Automate vulnerability management and risk control

Once a TMT knows its attack surface , it must have automation in place to patch any assets , ( both

Because organisations in the technology , media and telecommunications ( TMT ) sectors represent a critical industry , they must pay extra attention to the risks posed by AI . exposed and internal ), hide any assets that do not need to be exposed , or leverage ZTNA ( Zero Trust network access ) tools to access them . For assets that must be exposed , harden them against AI-enabled threat actors who are looking for gaps in networks .

Invest in strong cybersecurity tools and training

TMT organisations should use robust solutions for threat detection and response . These tools enhance cyber-resilience by identifying and mitigating threats effectively . They should also educate staff on AI-related risks and cybersecurity best practices to promote a culture of awareness . Empowered employees can proactively recognise and address potential threats .

Encourage collaboration

Partner with other organisations and cybersecurity experts to share insights and intelligence on emerging threats . By working together , TMT companies can improve their ability to detect , prevent and respond to cyberattacks to strengthen the industry ’ s overall cyber-resilience .

Implement continuous monitoring

Establish systems for ongoing monitoring of networks and systems to promptly detect and respond to any suspicious activity .

Have a proactive defence

Conduct regular AI risk assessments tuned for bias , explainability and threat detection . Additionally , they should implement encryption for secure AI computations and leverage data governance platforms for access control . This also means developing AI-specific incident response plans through tabletop exercises and utilising automated response .

30 WWW . INTELLIGENTCISO . COM