Codified

Security, governance, and AI safety in GenAI deployments are top of mind for CIOs. In fact, in a survey Glean conducted earlier this year, 73% of CIOs said that generative AI tools not vetted by the IT department are a threat to the business. AI security is a core focus for Glean and our customers. Enterprises rely on Glean for its strict permissions enforcement, single-tenant model, and AI governance practices. I shared some ways we approach AI security with Sri Muppidi from Business Insider that you can read in the article linked below, and also expanding on them here: 1?? Permissions: LLMs should only access data that the user is allowed to see. This way, we keep sensitive information safe and avoid any data leaks. 2?? Training: Since LLMs can remember the data they were trained on, it's crucial to never use company data for training. This helps protect proprietary company information. Glean has agreements with leading LLM providers that promise zero-day retention and no training on your data. 3?? Evaluation: Our main focus is on work AI, so users expect answers that are based on company data. We use our own AI evaluators to ensure the answers generated by LLMs are accurate and reliable. https://bit.ly/4eYaryc

Since our founding in 2012, the security of our customers’ data has been our highest priority. That’s why the recent cyber security threat targeting some of our customers has been unsettling, especially given that we, and cybersecurity experts Mandiant (part of Google Cloud) and CrowdStrike, have found no evidence to suggest that unauthorized access to Snowflake customer accounts stemmed from a breach of Snowflake's enterprise environment.? ? Mandiant released their investigative report on the threat on June 10th confirming our preliminary findings that we had begun sharing with our customers on May 24th. Key Mandiant findings include: ? Every incident Mandiant responded to associated with this campaign was traced back to compromised customer credentials. ? The impacted accounts were not configured with multi-factor authentication enabled, meaning successful authentication only required a valid username and password. ? Credentials identified in infostealer malware output were still valid, in some cases years after they were stolen, and had not been rotated or updated. ? The impacted Snowflake customer instances did not have network allow lists in place to only allow access from trusted locations. We operate under a shared responsibility security model with our customers – with them having the responsibility to follow best practices when configuring networks and enforcing secure authentication methods for access to their systems – and now we plan to strengthen this model by requiring more stringent protections. In the coming weeks, we will be providing a feature for administrators of Snowflake accounts to make multi-factor authentication (MFA) mandatory for all users; ultimately moving to MFA by default. While we target to roll out the enhanced authentication policies by the end of June, we are going to do this in a controlled and staged way alongside close communication and enablement. By doing so, we’ll not only be helping our customers better protect themselves, but we’ll also be leading the industry to what we believe will become an industry standard. We are also accelerating in-product capabilities, such as our Trust Center. This new active audit and monitoring capability is expected to be generally available by the end of June, with additional transparency specifically around MFA and network policies. This is in addition to other actions we’ve already taken, like locking customer accounts where we saw cyber threat activity, working closely with affected customers to help them better protect themselves, and communicating with all of our customers to harden their security measures. You have our commitment that the security of your data will always be our highest priority.

Don't miss out on the Seattle AI Investor Summit+Showcase! Tickets are selling fast… Get ready to be inspired by industry leaders, visionary speakers, and groundbreaking startups at our event that promises to shape the future of AI! Connect with VCs, mingle with representatives from industry giants like Microsoft, Amazon, Accenture, T-Mobile, and more, and explore the transformative potential of the latest AI innovations. ?? Save the Date: June 10th and 11th ?? Venue: Accenture Innovation Hub and Bell Harbor International Conference Center ?? Presenting sponsor: Microsoft Seize the opportunity to be part of the AI revolution! Register now: https://lnkd.in/gfW8uTum #Seattle #AI?#Startup #Microsoft #Innovation #CVC #VC?#SeattleAIWeek

"We give the CISO visibility....." is something I hear from almost any security vendor, but what we need is more action! #CISO