(P05) (INFOSEC) Sharing Data Security Responsibility with Employees to De-Risk AI

Before Canadian organizations can fully embrace AI, a crucial step must not be overlooked: cleaning and securing data before AI or malicious actors can discover it. The rapid adoption of AI highlights a long-standing issue: organization-wide sharing, outdated links, sensitive files with unrestricted permissions, and the proliferation of unstructured data in collaborative environments create silent risks that AI tools can unintentionally expose.

Beyond the technical challenge lies a fundamental question of responsibility. For too long, data security has been viewed as the sole responsibility of IT and security teams—an impossible burden given the scale and complexity of today's environments. The trend is clear: data security must become a shared, enterprise-wide responsibility, anchored in the operational context and aligned with daily activities.

The challenge lies in turning this intention into action. How can organizations translate the principle of shared responsibility into concrete, daily practices for employees? How can security be integrated into workflows in an intuitive, seamless, and frictionless way, so that secure behaviors become second nature?

This panel will explore how Canadian organizations can prepare for AI adoption by rethinking the assignment of responsibilities, empowering employees, and making security both tangible and sustainable.