AI adoption at investment firms has outpaced oversight. Employees sign up for free tools, vendors switch on AI features inside software firms already own and many of these tools connect quietly to email, files and client data. In this 30-minute panel, Mike Regan, Director of Cybersecurity Compliance at Silver, and Adam Pfefer, Founder and CEO of Clarier, explore where the real risks sit and how CCOs, COOs, CISOs and CTOs can build an AI governance program that holds up to regulators and allocators.
Key Takeaways
- The visibility gap is real. When firms run AI discovery for the first time, they almost always find more tools than leadership expected, and approved usage rarely matches actual usage.
- AI is a cyber risk, not just a policy question. Data exposure, connected-app access, AI-enabled phishing, deepfakes and autonomous agents all expand the firm’s attack surface.
- Governance works best when it is continuous. An effective program pairs a written AI policy with ongoing monitoring, AI vendor risk review, incident response planning and clear ownership.
- Three steps to take this quarter: name one accountable owner in Compliance with IT support, build an inventory of the AI tools in use and assess the configurations, access and connectors of the platforms you already pay for.
Watch the full recording below!