AI: Can you avoid the risks it carries?

Are there risks to AI? Absolutely! There are end-of-the-world predictions about the use of AI. For a business, many of the risks are a bit less extreme, but they are also very real. For example, in the area of content creation. There are a variety of risks that you open yourself up to. One of the key ones is the trustworthiness of the content created. You expect generative AI to create an accurate explanation or description of a topic, event, thing, or idea, However, can you, in fact, completely rely on that? The answer is probably a qualified no. The level of “qualified” depends on a variety of factors. Your AI generated content is only as good as its sources, and that can create real questions for readers. Also, an organization using AI to create any type of video, text, image, or audio content needs to be concerned that it may include proprietary information that you need permission to use. This means material created by generative AI could suddenly veer off into copyright infringement.

AI is also being used in areas such as recruitment. However, there has been research suggesting that bias can sneak into AI decisions as a result of the source data the tools are using. Bias is a concern not limited to the one example of recruitment. It can have consequences in areas where AI is making marketing decisions, and can taint medical and legal recommendations AI might provide. As a result, AI cannot go “unmonitored.” Review by humans and other tools is a best practice that is needed to improve accuracy and trustworthiness. This, in turn, may cut into the efficiencies that are perceived to be created by AI. Also, a lot of AI–Chat GPT to just take one example–isn’t going to necessarily incorporate consideration of regulation and compliance requirements. Many countries, individual States in the US, and US federal agencies are implementing data security regulations that are designed to protect the Personal Information of individuals. In many cases violations include civil penalties. In the case of the European Union’s General Data Protection Regulation, fines are significant.

Finally, if you are considering stepping into AI, your MSP can provide guidance. Our recent list bears repeating: Eight ways an MSP can help you approach an AI solution.

Step one: Assess potential uses of AI. Your MSP should have a solid understanding of your entire business and how AI might contribute. They can help you start with small steps and move from there.

Step two: Understand your KPIs and organizational goals, from the top down. Before jumping off and adopting AI just because it is there, evaluate your KPI’s. Where do you perceive you need a boost?

Step three: Propose a possible range of AI solutions. An MSP will be knowledgeable about the variety of applications out there and lead you to select those most appropriate for your goals. Remember, they should be directed toward assisting KPI improvement.

Step four: Estimate the solution’s ROI. Remember, measurement is important. And you can not do everything. So identify each potential AI solution’s ROI. As mentioned above, AI isn’t just a trendy tool to adopt just “because.”

Step five: Ensure compliance: For example HIPAA, PCI. HITRUST. ISO27001, SOC1, SOC2 or similar legal and industrial standards. AI is a powerful and potentially intrusive tool. Compliance is critical.

Step six: Implement the solution. An MSP can implement the solution for you. Most business owners do not have the resources available for what can be a time-intensive project.

Step seven : Manage tool-related risks. As noted, there are best practices available. Monitor to ensure your outcomes with AI are accurate, trustworthy, defensible, transparent and meet regulations.

AI Is All Around Us

IT seems it is virtually impossible to avoid hearing about Artificial Intelligence (AI). Ever since ChatGPT hit the market, AI has become a never ending source of news, articles, advertisements, and lots of gloom. Artificial intelligence isn’t exactly new–the term goes back to the mid-1950s. Artificial Intelligence is a broad term and encompasses a few different subsets of processes. Generally, it refers to machines or computers doing things that we consider a skill limited to human intelligence. What has caught the public eye is what is labeled “generative AI”. Generative AI (e.g ChatGPT) refers to the AI tools that can create content, music, images, code and voice. One of the reasons generative AI is so widespread in its applications is that it doesn’t require coding skills for a layperson to use it, instead the user can instruct the tool to create content by using natural language.

Questions about generative AI

The media has certainly been filled with concern about AI and has raised many questions about areas where we potentially interact with it. How do we know the content we are reading is accurate and can be trusted to have come from reliable sources that have been vetted for accuracy? Can it be used to create misleading information that could misdirect our understanding of social, political, cultural, legal and other issues that affect the well-being of society? Others worry it could displace whole sectors of human labor. These are heavy questions best left to another venue of discussion.

Where is the average person interacting with AI?

We interact with artificial intelligence everyday in places we probably never give much thought. Those recommendations for purchases that you see on every shopping website you visit? That is done by a form of AI known as machine learning. Your thermostat that turns the heat up and down by learning when you usually leave the house? The refrigerator that makes your shopping list? Those are both examples of machine learning as well.

If you use a Managed Service Provider or a Managed Security Services Provider, AI is a new line of higher quality defense against cybercrime that they may be using to protect you. One of the greatest risks a business faces is a breach of its data by cybercriminals: malware, ransomware, et.al. and the tricks being used keep increasing in sophistication. Ransomware is particularly insidious. It can seize your data and hold it hostage for a ransom of currency, crypto or traditional. Once attacked there are very few alternatives to submitting to the ransom request. AI can help MSPs respond faster to specific threats and concerns, and assist in diagnosis and troubleshooting. Also, as every SMB knows, 24/7 monitoring and support is a critical service that an MSP can provide far more efficiently than a company can do in-house. (This has to do with the benefits of economies of scale.) AI can improve 24/7 monitoring because AI can evaluate an enormous amount of data, far faster than humans, and likely identify problems before they affect your business.

AI: Of any value to an SMB?

Artificial Intelligence (AI) has been all the media rage in the past year. Specifically, it isn’t AI in general, but a specific category of AI known as generative AI. This AI is capable of creating content, such as text, images, audio and similar data. Examples of generative AI tools can create content, music, image code, and voice. What this can include are documents that are used for marketing and other content on websites, as well as images, video, and audio. What made generative AI more widespread are the tools that use natural language to utilize them. It doesn’t necessarily require expertise in coding anymore. The generative AI tool that hit the news and has everyone curious about this development is ChatGPT. This allows any user to create conversations, answer text, and similar “written responses.” ChatGPT and similar tools are available to almost anyone.

Of course if you follow the news, there is much excitement about the potential of generative AI. It may be used to facilitate faster customer service, help attorneys evaluate large quantities of legal documents and propose new approaches to cases, medical professionals diagnose, and on and on. It also raises lots of concerns. How does one know that the content created by generative AI is accurate and can be trusted? For instance, can it be used to create misleading information, such as deceptive statements that could alter someone’s understanding of a political, cultural or medical issue. And there are others who worry it could displace whole categories of human workers, but that question isn’t our worry here.

One way you can leverage AI for your benefit is through your Managed Service Provider. Many industries can benefit from the judicious use of AI, such as legal, medical, architectural design, etc. and the IT world is no exception. In particular, AI may be another line of defense in cyber security. Clearly, one of the greatest risks any business faces is cybercrime. Malware, data breaches, ransomware–they all are a business-owner’s nightmare. Ransomware can hold your data hostage. Once attacked, there are very few alternatives to submitting to the ransom request unless you have solid, uncorrupted backups.

AI can help MSPs respond faster to specific threats and concerns, and assist in diagnosis and troubleshooting. Also, as every SMB knows, 24/7 monitoring and support is a critical service that an MSP can provide far more efficiently than a company can do in-house. This has to do with the benefits of economies of scale. AI can improve 24/7 monitoring because AI can evaluate an enormous amount of data, far faster than humans, and likely identify problems before they become business effecting.

One way a small business can utilize AI is marketing and sales. A lot of an SMB’s digital marketing tasks can be time-consuming and easily automated. Drip email campaigns, website visitor tracking, understanding where each customer exists in the sales funnel at any given moment, and other digital tools that increase customer engagement and drive sales are an excellent introduction to AI as a marketing tool. These tools both free up sales and marketing staff for other more complex tasks and improve customer engagement. These tools can be easily deployed by SMBs and are an excellent introduction to AI. Talk to a trusted MSP for guidance. You don’t have to go it alone.

Your business runs on data, but so do the cyber criminals who want to steal yours

One very painful truth about running a business is that you possess data that is attractive to criminals. There is no avoiding that reality. You have data. They want data. It is an ongoing challenge to maintain data security as cyber criminals’ efforts evolve and change on a daily basis. The wall that kept you safe last week may have holes in them today. Keeping up with the latest threats is a specialized field that in-house IT support likely doesn’t have. An MSP can provide the support you need in the face of ransomware threats and other malware. Also, an MSP can provide 24/7 monitoring.

Speaking of data security, brand damage isn’t the only issue with data security breaches. In many cases, there are data protection laws that regulate how you secure personal information. In specific industries there are federal, state, and even overseas regulations that set standards for data protection. How you choose to protect data may be out of your hands. MSPs have the experience and knowledge to address compliance management. For example, there are a number of data protection laws (HIPAA, FERPA, CA Privacy Act, GDPR, FTC Safeguards Rule) out there that not only provide penalties if a data breach occurs, but also mandate specific protocols to better ensure your data is protected. Avoiding a data breach isn’t enough. Some of these protocols can be quite demanding and some require periodic testing and are subject to audits. Samples of the types of requirements mandated by some of these laws may include.

• Designating one individual to oversee data protection and security
• Conducting a risk assessment – This means analyzing what data you possess , where it is stored, and in what ways it is vulnerable.
• Creating safeguards to address all potential areas of vulnerability
• Designing and documenting tools to secure your data and tracking access
• Tracing the location and security of all data whether it is at rest or in transit.

Not only do you have to set up protocols, you may have to prove they are operative and be subject to audits. All of this can be extremely distracting to a small business.

Another area related to data security is the issue of backup and recovery. So much can go wrong. There is nefarious activity: criminals actively trying to break into your data and steal it. There is human error: individuals taking actions that accidently delete or damage data. And of course, hardware can fail and software can have bugs. And, if not done correctly, backups may be infected and be of little value.

An MSP can design backups that are continual and are protected at an offsite location.

More importantly, it isn’t enough to know your data is safe if something happens. Your business is dependent on using that data. Losing a day of access can cripple your business. That means planning for recovery in case something happens. How will you transition to another mode of data access? Your customers expect 24/7 availability. An MSP can develop recovery plans that work to ensure your operations see minimal disruption in the event of a failure.

Strategic IT planning for your business

One thing that the best MSP can do is become a strategic partner. Your expertise is your industry, business, or profession. Trends and innovations in technology aren’t your focus. However, your business can benefit from some long-term strategic planning in terms of the technology you will deploy to remain competitive. New technology will offer new opportunities. An MSP who has experience in your industry can become a partner. After taking the time to learn your business, your goals, and the competitive field in which you operate, an MSP can take a seat at the table of your business planning. At the highest level, this is where a skilled MSP becomes a significant asset as your business grows and faces new market challenges.

Additionally, An MSP can help with other parts of your IT infrastructure to protect your data as well as facilitate more effective collaboration internally as well as with clients. Here are three examples.

Backup and recovery

Another area related to data security is the process of securing your data in the event of theft, a hardware or software issue, or even a natural disaster that cuts access to your data’s physical location. Backing up your data needs to involve a lot more than running nightly backup to an external drive. That may be ok for your home laptop, but it doesn’t cut it if you want to protect your business data. An MSP can support continual data backup to offsite locations. This means at any point there is a system failure or breach, all of your data remains secure at one or more distant locations. Backup also includes recovery. Having your data safely stored in the event of a disaster isn’t enough. Your business will need continuing access to that data. An MSP can develop recovery plans that work to ensure your operations see minimal disruption in the event of a failure. Also, clean backups are critical for avoiding the consequences of a ransomware attack. Poorly handled back procedures can leave your data vulnerable,

Cloud Services

The decision to use cloud services is closely related to data security and cybercrime. Locating all of your data and software applications physically in your own location may seem like the safest thing to do, but that may not be correct. If you utilize cloud storage, you can maintain access to that data from any location. If a natural disaster or other emergency limits access to your physical locations or disables it, your business and employees can access the data from anywhere. Also, the cloud offers economies of scale. To maintain sufficient capacity to meet peak times, maintain all of the necessary hardware and software, and monitor it 24/7 involves considerable in-house labor and capital expense. Migrating to the cloud means you share those fixed costs with others. An MSP can handle selecting and designing a cloud solution most appropriate to the needs of your specific industry and business.

Unified Communications

Unified communications is a service that pulls together the different channels your employees and clients use to collaborate, sell, communicate, etc. Unified communications systems have many moving parts. Encryption, data security, ease of use, cross platform support as well as other support services can create a communications system that works for everyone, no matter what channel they choose to be using.