Digital White Papers

I L T A W H I T E P A P E R | S E C U R I T Y & C O M P L I A N C E 23 David Whale is a Director of Information Security with over twenty years of experience in cybersecurity across professional services, construction, and legal industries. He is passionate about enabling businesses innovation in a risk managed environment. He holds a degree in Business and his CISA and CRISC in security which has greatly influenced his writing and approach to Information security and risk management. You may recognize David from some of his other podcast and panel discussions he has hosted with ILTA. can detect abuse, recognize standard input manipulations, and limit the amount of data in rest and transit and the time it is stored. When you are comfortable purchasing or developing a secure AI/ML system, it is time to ensure the technology is rolled out and supported securely. To do this, you will want to: • Implement secure data storage practices, such as encryption, access controls, and regular data backups, to protect sensitive data use used by the AI/ML system. • Use secure protocols (HTTPS) to encrypt data in transit and at rest and prevent unauthorized access, interception, and tampering. • Anonymize sensitive data used in the AI/ML system to protect user privacy and comply with regulations. • Apply the necessary role-based access controls (RBAC) to restrict access to the AI/ML system and its data based on the majority of minor privilege requirements. • Configure monitoring and logging to track the AI/ML system's behavior and detect suspicious activity. • Quickly update and patch the AI/ML system and its components to protect against new vulnerabilities and exploits. • Update security operation processes to include new AI/ required controls. • Conduct regular security audits and monitor the AI/ML system for unusual or suspicious activity. As members of the legal profession begin to understand and embrace AI/ML technologies widely, we must remain intentional about addressing the legitimate fears and challenges they present. Accordingly, it would be wise for legal service communities to navigate the complexities of AI/ML with a nuanced approach that balances innovation and caution. If we manage it responsibly, exercise some faith, and remain vigilant about ensuring the proper controls and governance are in place, we should all be able to progress together. ILTA S E C U R I N G T H E U S E O F A R T I F I C I A L I N T E L L I G E N C E A N D M A C H I N E L E A R N I N G ( A I / M L ) I N L E G A L S E R V I C E S

• Cover