Knowledge Network · Aug 14, 2026
The Biggest Mistake: Treating AI Like Just Another Checkbox
From my recent conversation with Paul Kurtz on the podcast: One of the strongest points from the discussion was this: AI is not just another line item on a questionnaire. It’s a new capability that can create new risk pa...
- How are they using AI?
- What data is being used?
- What decisions does the AI influence?
- Who reviews the output?
- What safeguards exist if the model behaves unexpectedly?
- Has the use case changed since the last review?
Those questions help you move from surface-level awareness to real risk understanding. Paul explained that his team was already asking about AI in their information security questionnaire, but the training helped him sharpen the approach. The difference was not just asking whether AI was present - it was digging into where, how, and why it was being used.That shift matters because a lot of AI use cases are low risk at first glance, but can become more meaningful over time. A tool that starts with meeting notes could later expand into client-facing interactions or decision support. That’s why ongoing monitoring is so important.
To learn more, go and listen, subscribe: https://thirdpartythreathunters.buzzsprout.com