Quiz: Building a Security Culture

1. Why does banning AI tools entirely tend to fail?

Because AI tools are legally required in many industries Because bans simply move AI use underground, creating shadow IT with no visibility Because AI tools are too inexpensive to ban effectively Because employees always override management decisions

2. What does the chapter recommend a policy include beyond prohibitions?

Mandatory weekly AI training sessions A no-blame reporting path for when someone thinks they may have made a mistake Automatic monitoring of all employee AI usage Financial penalties for policy violations

3. What is the goal of AI security culture?

Zero AI use across the organisation Making people afraid of the tools AI use that doesn't create avoidable risk, with specific rules for narrow high-risk scenarios Ensuring every AI interaction is logged and audited

Check Your Understanding

Check Your Understanding