Is Handing AI Risk to Your Cyber Team a Big Mistake? with James Mortlock [108]

From The Business of AI · 52:07

Show by UKAI - The Trade Association for AI businesses across the UK

Rolling out AI and leaving the risk to your cyber security team could be the biggest blind spot in your business. James, founder of Mortlock Risk Management, brings nearly 20 years of military intelligence experience in the British Army and an award-winning master’s dissertation on the security risks of generative AI. He breaks AI risk into three areas: attacks on the models themselves, such as prompt injection and data being extracted through poorly configured chatbots and agents; the inherent limitations of the models, from hallucinations to bias; and the growing use of AI by criminals, from deepfake fraud to voice cloning and social engineering at scale.James argues that many of the biggest risks are human rather than technical. People under time pressure skip checks, staff turn to personal “shadow AI” tools when no approved option exists, and badly designed hiring processes can bake in discrimination. His practical advice for organisations of every size covers four areas: clear strategy and governance with someone accountable; light-touch risk registers and a genuine AI use policy; technical controls such as approved model lists, token limits and an AI bill of materials; and targeted training to close the gaps. He also recommends the free OWASP Top 10 lists for large language models and agentic AI as the best place for small businesses to start.AI is our Business.UKAI is the Trade Association for AI businesses across the UK. Join us, ukai.co

More episodes of The Business of AI

More episodes

PodSearch is a free, independent podcast search engine. Read about PodSearch, the privacy policy or contact us.