Rohit Dhamankar, VP, M&A and AI Strategy at Fortra, explains in Privacy PC why shadow AI presents a fundamentally different challenge than shadow IT. He highlights how unsanctioned AI can interact with sensitive data, systems, and business processes, making visibility, strong data controls, and ongoing testing essential. For organizations, effectively governing AI means managing these risks while still enabling employees to benefit from AI.
“Security teams cannot protect what they cannot see. Before they can stop sensitive data from reaching AI tools, they must first establish a baseline understanding of how those tools are being used across the business.” — Rohit Dhamankar