More Details from the Activate Shadow AI Scan
planned
R
Ryan Williams
It would be great if Shadow AI could include a more details and maybe have a detailed internal IT security report that can be generated from it which includes as much detail as possible. What devices are using what AI and how often or much is it being used, etc. if it is "local AI", then expand upon that and provide the name of the application or llm that is being used locally and whether corporate data and what types of corporate data are being shared.
N
Nicole Lefsky
In addition to the name of the device where it was found, noting if the LLM is installed or found in the browser's history would be very helpful. Also, adding the scan date in Activate would be helpful, especially if we want to run it at different times to compare shadow AI. Additionally, which user profiles are associated with the findings and distinguishing if multiple LLMs are found on the same devices/user profiles. Currently, the outcome notes the LLM and number of devices it's found on, but doesn't indicate if each of the devices have multiple LLMs. So if ChatGPT is found on 10 devices and Claude on 3, does the same device have ChatGPT and Claude or are they separate devices. The latter indicates more widespread Shadow AI. Julia Carroll - I see this is planned but wanted to provide this feedback.
J
Julia Carroll
updated the status to
planned
S
Stephen
Agreed, the Shadow AI report is very unimpressive. when you look at the raw data the scripts capture there is a wealth of detail that can help, showing a timeline of the last 30 days of access and by who. Having the Shadow AI report demonstrate the high-risk users, High risk platforms are definitely great talking points with clients.
J
Julia Carroll
updated the status to
under review