IAPP Global Privacy Summit 2025

Speaking session

A 5 Step Framework for AI Governance

The rapid rise of generative AI has put a spotlight on privacy, security and governance professionals as they look to ensure the safe use of AI in their organizations. While AI has been around for a while, generative AI introduces unique new challenges and an unprecedented rate of adoption, triggering the need for swift action. Data is the fuel for these new systems, which is increasingly in the form of unstructured data. How can you govern the data feeding these models? How can you assess the models being used so they align with your policies? How can you ensure compliance with emerging frameworks, such as the recently enacted EU AI Act and NIST Risk Management Framework? This session will share a 5 step framework for building an AI Governance program, including:

• Discovering Shadow AI and building a catalog of AI models within the organization
• Evaluating the risk of AI models across a range of metrics
• Monitoring data sources feeding AI, and redacting sensitive data as needed
• Building guardrails to prevent misuse of AI systems
• Automating compliance with a wide range of appropriate regulations

Rehan Jalil

CEO, Securiti