By treating it as a new exposed component of your information system, with its own risks: data leaks, hijacking through malicious instructions hidden in a document or an email, unwanted actions in your tools.
ANSSI (France’s national cybersecurity agency) has published a guide of 35 recommendations covering the whole lifecycle of a generative AI system, from training to production[2]. For a business integration, several principles are decisive:
- isolate the AI system and limit its access to what is strictly necessary;
- limit automatic actions triggered from uncontrolled content, such as emails or documents received from outside;
- log exchanges with the models so you can analyse what happened;
- plan a degraded mode, so your teams can keep working if the AI service is unavailable.
These measures are decided when designing the architecture, because adding them after going live costs much more. They also require an experienced developer to review the code of the connections: generated too quickly and without control, they easily let visible access keys or overly broad rights slip through.