Question 1

How do I identify Shadow AI in my organisation?

Accepted Answer

Shadow AI can be discovered through network traffic analysis, expense audits for AI subscriptions, staff surveys, and IT system logs. A comprehensive AI audit will uncover all AI tools being used, authorised or not.

Question 2

Does using ChatGPT Enterprise violate SRA confidentiality rules?

Accepted Answer

Not necessarily, but it depends on how it's configured and used. Enterprise versions with proper data handling settings can be compliant, but firms need clear policies and staff training.

Question 3

What are the SM&CR implications of deploying AI in my firm?

Accepted Answer

Under SM&CR, senior managers are personally accountable for AI systems in their areas of responsibility. They cannot claim ignorance of AI decisions and must ensure appropriate governance frameworks are in place.

Your AI Governance Questions, Answered

Still Have Questions?