Artificial Intelligence is revolutionizing higher education, but even innovation needs guardrails. Too often, AI bypasses standard procurement, creating massive Shadow IT risks. This session argues that AI applications demand the same due care, diligence, and security safeguards as any traditional enterprise software.

Grounded in NIST and ISO 27001 controls, we will explore how to govern AI effectively across your institution. Let’s delve into tried and true controls to align organizational policies, mature AI risk management, and deploy technical controls to safely enable AI capabilities without compromising institutional data privacy or security.

Learning Objectives:

• Analyze real-world case studies of higher education institutions that have successfully integrated AI into existing security governance programs.
• Walk through existing security program controls applied to AI applications across organizational, people, and technical controls.
• Evaluate technical controls that would be needed like web traffic analysis and Data Loss Prevention (DLP) to monitor AI interactions.