Wes Spencer argues security teams should stop lecturing clients about risks and instead fix concrete problems first. Walk in, stop salary data from leaking via shadow AI, prove the value, then expand to bigger initiatives. Speed matters, but don't add unnecessary obstacles.
If we walk into the client business and we say, you know, if you're just using shadow AI and all of a sudden all your salary data and corporate documents are leaking everywhere, we should, we can help you fix that by using our tool. They're gonna say, shut up, nerd. You know, if we can say and walk into the business and say, again, I can help you with this one thing, you know, and let's build some, you know, we'll build some, we'll help you kind of get there. And now you've seen the value of it. Now I get to come back and say, man, so glad you saw value in that. I'd love to have a deeper conversation about building even more of this. But, you know, some of these things on this list that we'd love to help you with, we got to do it correctly and safely. And, you know, I, I like to use the idea of like, if you're going super fast down a mountain road, you don't want speed bumps to stop you every single time.
Above the Stack Ep 14: AI Security Beyond Policy: How MSPs Can Put Real Controls Around AI Use
