Call us now:
There’s a lot of discussion about problems at the AI startup Delve, which raised $32 million from Y Combinator. Not all the facts are known, but some LinkedIn posts and a YouTube video have raised concerns.
Even without an official investigation outcome, the situation highlights issues with using AI for audits and compliance. There are no quick fixes in cybersecurity compliance. Promising full compliance in just a few months is unrealistic. Companies still need internal teams to design controls and test them before automation can help.
Things get more complicated when legal and regulatory requirements are involved. Once companies are required to prove oversight of cybersecurity risks, the process becomes much stricter. Claims of achieving 100% compliance are simply not realistic.
There’s also the issue of audit performance. Audits should be done by qualified professionals who meet international standards. If not, the audit isn’t reliable. Similarly, a compliance certificate is meaningless if it doesn’t come from a recognized authority.
Finally, audits depend on strong control design, testing, and evidence. Companies must show that their controls reduce risk and work in practice. This requires real effort, ongoing documentation, and continuous testing. Without this, passing an audit isn’t possible.
Overall, the Delve situation highlights the real challenges of using AI in cybersecurity risk management and regulatory compliance. Cyber compliance is a legal risk, and one we may see as the case with Delve gets clearer.
Liz Sandwith CFIIA
@Parava Security Solutions
#artificalintelligence #cyberassurance
https://lnkd.in/erX7w5rH
View Original Post
https://www.linkedin.com/feed/update/urn%3Ali%3Ashare%3A7442188851919433728