The majority of organizations — 89% of them, according to the 2024 State of the Cloud Report from Flexera — have adopted a multicloud strategy. Now they are riding the wave of the next big technology: AI. The opportunities seem boundless: chatbots, AI-assisted development, cognitive cloud computing, and the list goes on. But the power of AI in the cloud is not without risk. While enterprises are eager to put AI to use, many of them still grapple with data governance as they accumulate more and more information. AI has the potential to amplify existing enterprise risks and introduce entirely new ones. How can enterprise leaders define these risks, both internal and external, and safeguard their organizations while capturing the benefits of cloud and AI? Defining the Risks Data is the lifeblood of cloud computing and AI. And where there is data, there is security risk and privacy risk. Misconfigurations, insider threats, external threat actors, compliance requirements, and third parties are among the pressing concerns enterprise leaders must address Risk assessment is not a new concept for enterprise leadership teams. Many of the same strategies apply when evaluating the risks associated with AI. “You do threat modeling and your planning phase and risk assessment. You do security requirement definitions [and] policy enforcement,” says Rick Clark, global head of cloud advisory at UST, a digital transformations solutions company. Related:Are We Ready for Artificial General Intelligence? As AI tools flood the market and various business functions clamor to adopt them, the risk of exposing sensitive data and the attack surface expands. For many enterprises, it makes sense to consolidate data to take advantage of internal AI, but that is not without risk. “Whether it’s for security or development or anything, [you’re] going to have to start consolidating data, and once you start consolidating data you create a single attack point,” Clark points out. And those are just the risks security leaders can more easily identify. The abundance of cheap and even free GenAI tools available to employees adds another layer of complexity. “It’s [like] how we used to have the shadow IT. It’s repeating again with this,” says Amrit Jassal, CTO at Egnyte, an enterprise content management company. AI comes with novel risks as well. “Poisoning of the LLMs, that I think is one of my biggest concerns right now,” Clark shares with InformationWeek. “Enterprises aren’t watching them carefully as they’re starting to build these language models.” Related:AI’s on Duty, But I’m the One Staying Late How can enterprises ensure the data feeding the LLMs they use hasn’t been manipulated? This early on in the AI game, enterprise teams are faced with the challenges of a managing the behavior and testing systems and tools that they may not yet fully understand. “What’s … new and difficult and challenging in some ways for our industry is that the systems have a kind of nondeterministic behavior,” Mark Ryland, director of Amazon Security for Amazon Web Services (AWS), explains. “You can’t comprehensively test a system because it’s designed in part to be critical, creative, meaning that the very same input doesn’t result in the same output.” The risks of AI and cloud can multiply with the complexity of an enterprise’s tech stack. With a multi-cloud strategy and often growing supply chain, security teams have to think about a sprawling attack surface and myriad points of risk. “As an example, we have had to take a close look at least privilege things, not just for our customers but for our own employees as well. And, then that has to be extended not to just one provider but to multiple providers,” says Jassal. “It definitely becomes much more complex.” AI Against the Cloud Widely available AI tools will be leveraged not only by enterprises but also the attackers that target them. At this point, the threat of AI-fueled attacks on cloud environments is moderately low, according to IBM’s X-Force Cloud Threat Landscape Report 2024. But the escalation of that threat is easy to imagine. Related:How Do Companies Know if They Overspend on AI and Then Recover? AI could exponentially increase threat actors’ capabilities via coding-assistance, increasingly sophisticated campaigns, and automated attacks. “We’re going to start seeing that AI can gather information to start making … personalized phishing attacks,” says Clark. “There’s going to be adversarial AI attacks, where they exploit weaknesses in your AI models even by feeding data to bypass security systems.” AI model developers will, naturally, attempt to curtail this activity, but potential victims cannot assume this risk goes away. “The providers of GenAI systems obviously have capabilities in place to try to detect abusive use of their systems, and I’m sure those controls are reasonably effective but not perfect,” says Ryland. Even if enterprises opt to eschew AI for now, threat actors are going to use that technology against them. “AI is going to be used in attacks against you. You’re going to need AI to combat it, but you need to secure your AI. It’s a bit of a vicious circle,” says Clark. The Role of Cloud Providers Enterprises still have responsibility for their data in the cloud, while cloud providers play their part by securing the infrastructure of the cloud. “The shared responsibility still stays,” says Jassal. “Ultimately if something happens, a breach etcetera, in Egnyte’s systems … Egnyte is responsible for it whether it was due to a Google problem or Amazon problem. The customer doesn’t really care.” While that fundamental shared responsibility model remains, does AI change that conversation at all? Model providers are now part of the equation. “Model providers have a distinct set of responsibilities,” says Ryland. “Those entities … [take] on some responsibility to ensure that the models are behaving according to the commitments that are made around responsible AI.” While different parties — users, cloud providers, and model providers — have different responsibilities, AI is giving them new ways to meet those responsibilities. AI-driven security, for example, is going to be essential for enterprises to protect their