Security Training
Client Details Do Not Belong in Unapproved AI Tools
What Is Happening
AI chat tools are useful. Paste in a long email thread and get a short summary. The risk is in what goes into the box.
When you paste text into an AI tool that your company has not approved, a copy now sits with an outside company. You cannot pull it back, and you cannot say who may see it or how long it will be kept.
CISA's updated Insider Threat Mitigation Guide, released September 9, 2026, lists this as one way people with no bad intent put sensitive information at risk.
Sources
- CISA News Release, September 9, 2026CISA Releases Updated Insider Threat Guide with New Insights to Mitigate Physical and Cyber Threats
- CISA, September 9, 2026Insider Threat Mitigation Guide, September 2026 Edition (PDF)
Want This for Your Whole Team?Ask us about security awareness training for your staff.
Ask About Awareness Training