solutions
>
AI Governance

Enterprise AI Governance

With Tehama, businesses can achieve a good cybersecurity posture and good enterprise-level artificial intelligence governance - all in a single platform.

For many businesses around the world, security and governance strategies pre-date the artificial intelligence (AI) era. This has left many CIOs and CISOs hesitant in their approach to integrating AI into their enterprises.

“Startups Scramble to
Build Immediate AI
Security”

Dark Reading, January 2024¹

“AI Governance in the Age of
Uncertainty: International Law as
a Starting Point”

Just Security, January 2024²

“The
AI Governance
Challenge”

S&P Global, November 2023³

“Tehama has long been AuditBoard’s technology of choice when security and governance is paramount. We are thrilled with Tehama’s capabilities in the AI Governance technology space as this is highly topical for our business as well as for most of our enterprise customers.”

Richard Marcus
Chief Information Security Officer, Auditboard

Good AI governance with
Tehama’s Enclave platform

Tehama provides businesses around the globe with a key capability: to create secure and compliant “enclaves”, which are cloud-hosted highly-restricted zones (HRZs) within which only governed data is available to authorized users that may use only authorized apps and services.

This ability, to secure data and applications by creating secure access perimeters with role-based access and controls; data governance; privileged access management; and auditing and compliance support, it mission-critical in the AI era. The Enclave platform is ISO 27001, 27017, 27018 compliant, PCI compliant, and routinely penetration-tested.

Tehama's fastest growing use case is to help enterprises govern their adoption of AI.

Deliver Peace of Mind to Your Key Stakeholders

When your organization leverages Tehama’s all-in-one cybersecurity platform for AI governance, you will reap the following benefits:

Govern Adoption of Public and Private AI Models

All of your AI adoption will be limited to data your what your governance capacity has decided is appropriate for use with AI. You will be able to provide a complete inventory of all the data and data sources that your enterprise has made available to use with AI.

Govern Use of High-Risk AI

When your users make use of a high-risk AI tool, you can provide your auditors with a complete audit trail of what they saw and what they decided, validating a “human-at-the-helm” posture. And you have implemented a compelling «reasonably foreseeable misuse» risk-mitigation system covering your adoption of the high-risk AI tool.”

Protect IP Development when Leveraging AI

When your engineers and inventors create intellectual property using AI, you can provide your patent office with unimpeachable evidence of how “one or more natural persons significantly contributed to the invention.”

Develop Your own AI Models with Good Governance

You can rest assured that all of your AI adoption takes place in data-loss prevention perimeters that are secured to the ISO 27001 standard and are managed to a SOC 2 Type 2 compliance level.

CIOs and CISOs: Good governance is your business. Regulated AI governance is on the horizon. Be prepared with Tehama.

Governments around the world are developing legislation to regulate AI and impose good governance for high-risk use cases. Examples include the European Union (EU) AI Act⁴; the Executive Order on the Safe, Secure, and Trustworthy Development and Use of Artificial Intelligence⁵, published by The White House in October 2023; and, Canada’s proposed Artificial Intelligence and Data Act (AIDA)⁶, introduced as part of the Digital Charter Implementation Act, of 2022.

The EU’s approach to data protection, for example, sets the tone for how businesses like yours should approach their security and AI governance strategies. Many countries, including Canada, the UK, and Japan, for example, have made every effort to remain compatible due to hard-won EU GDPR adequacy findings. The United States follows this same pattern for any business participating in the EU-US Data Privacy Framework ⁷, to ensure adequate levels of data protection.

The EU AI Act: A Model for Good AI Governance

The EU’s AI Act offers the clearest signal to CIOs and CISOs contemplating the adoption of AI within their enterprises as to what good AI governance looks like, categorizing AI applications into four levels of risk – Unacceptable risk, high-risk, limited risk, and minimal to no risk. For high-risk AI, specifically, the EU AI Act⁸ outlines eight broad use cases:

Achieve Alignment With Core High-Risk AI Obligations

The EU’s approach to data protection also sets the tone for how businesses like yours should approach their security and AI governance strategies. Tehama directly supports six of the nine obligations imposed by the EU AI Act on enterprises in the public and private sectors.

Although the EU AI Act’s requirements for Transparency, Conformity, and Registration are not directly supported by Tehama, businesses must adhere to these for full compliance:

Transparency

The AI system must be sufficiently transparent to enable users to interpret the system’s output and use it appropriately (no black boxes).
Users must receive instructions for use that are concise, complete, correct and clear and “comprehensible”

Conformity Assessment Procedure

Conformity with the AI Act must be established before placing the AI system on the market.
In regulated product sphere, procedure will likely be carried out by existing regulatory authorities.
In other spheres, provider will do a self-assessment.

Other Obligations