The rapid spread of AI, cloud environments and remote work is creating critical blind spots for CISOs, making AI governance and user oversight essential to enterprise security, said Anthony Lim, Senior Research Fellow and Director at the Center for Strategic Cyberspace and International Studies (CSCIS).
As shadow AI and unsanctioned tools multiply across business units, security teams must address human-driven vulnerabilities, such as poorly written prompts and misread outputs. Clear organizational guardrails, not automated controls alone, are the answer.
“You don’t bring something into the system and let it run wild,” Lim said. “The executives need to understand what they are approving, what staff are allowed to do… You need to come up with a brief for the executives to say, look, this is what’s happening, this is what we need to approve, this is what we need to control, and then we turn it into HR policy and IT policy before we deploy.”
In this video interview with CISONow, Lim also discussed:
- Expanding security perimeters and tackling shadow cloud and shadow AI adoption;
- Building a responsible AI governance framework across all enterprise stakeholders;
- Mitigating technical AI vulnerabilities and prompt-driven data leaks.
About the Speaker
Anthony Lim is a pioneer of Asia-Pacific cybersecurity with more than 25 years of industry experience. He is Senior Research Fellow and Director at CSCIS in Singapore and holds academic and advisory roles in cybersecurity, governance and technology.
