Digital security company Vanta has released its latest State of Trust report, shedding light on the intersection of artificial intelligence (AI) and data security. The survey, based on responses from 2,500 IT and business decision-makers across Australia, France, Germany, the U.K., and the U.S., delves into the dynamics of trust in the context of AI adoption.
According to Vanta CEO Christina Cacioppo, 77% of surveyed businesses are already leveraging AI and machine learning for threat and anomaly detection. This application of AI aims to alleviate the workload of human compliance officers by automating tedious tasks. Additionally, generative AI plays a crucial role in compliance efforts, allowing the rapid conversion of policy documents into actionable code and auto-populating security questionnaires.
Despite the widespread use of AI in security measures, over 50% of respondents express concerns about the potential challenges in managing secure data effectively due to AI deployment. The specific worry centers around generative AI, with fears that its use could undermine customer trust. Generative AI is known for "hallucinating" or producing false results, raising questions about its reliability.
Further, Christina Cacioppo acknowledges the distrust surrounding generative AI, emphasizing that the technology is continually evolving. She sees generative AI as capable of providing valuable first drafts of work, although human intervention for editing and proofreading remains crucial. The human touch in refining AI-generated content is viewed as a key factor in maintaining trust with customers.
The survey results also highlight the role of regulation in building trust in the AI space. Half of the surveyed companies express a preference for deploying AI in a regulated environment, indicating that regulatory frameworks could enhance confidence in AI technologies. However, Cacioppo stops short of advocating for regulation, noting that Vanta is "pro-responsible use" rather than explicitly endorsing regulation.
Vanta's upcoming industry conference on the future of trust in an AI world is expected to delve deeper into these issues. The delicate balance between the opportunities presented by AI, particularly in threat detection and compliance, and the need to address concerns about generative AI's reliability underscores the evolving landscape of AI adoption in the realm of digital security. As businesses navigate this intersection, considerations around responsible use, human oversight, and potential regulatory frameworks will continue to shape the path forward.
