THE CYBER INTERVIEW
“ Finland ’ s NATO involvement inevitably makes it a more appealing target for cyber threats , particularly from nation-state actors ”
regulation . The issue now is about how we balance frameworks so that we don ’ t ‘ over-regulate ’ to negative effect .
For example , one area to consider is the implications of how the Act could inadvertently slow down innovation in cybersecurity . Proposals to impose stringent requirements on high-risk AI systems could be quite restrictive in the context of critical infrastructure management or cybersecurity solutions . These requirements may conflict with the fast-paced , adaptive nature of cybersecurity , making it harder for companies like ours to swiftly counter emerging threats .
However , there are certain aspects of the legislation that can guide businesses on how to effectively use AI technologies without adding significant risks . The proposed law is based on levels of risk and calls for specific transparency obligations , even for AI systems not classified as high-risk . So , organisations should review their customer-facing AI tools like chatbots ; customers must be informed that they are interacting with an AI , and appropriate disclosures need to be implemented .
Another important point is the focus on data protection and governance . Businesses should bolster their
data management practices to ensure sensitive information is secure , especially when using AI tools for data analytics or customer engagement . This could include enhanced encryption and stringent data access controls .
It ’ s also prudent for leaders to work closely with their cybersecurity vendors to understand how the new regulations will affect the development and deployment of AI-based security solutions . Vendor partnerships should be reviewed to ensure compliance with the Act ’ s provisions , thereby mitigating the risk of heavy fines . Businesses should also explore policies to conduct comprehensive audits of their existing AI-driven cybersecurity tools to determine whether they fall under the category of ‘ high-risk ’ as per the Act .
12 January 2024