Insight #1
Prompt injection is becoming a serious concern for those using current AI technologies. When using AI, make sure you have a way to at least detect these injection attempts if not block them.
Insight #2
Security questionnaires are antiquated and provide little value to someone trying to understand risk. It's time we use observability products to produce reports about the security posture of products and services.
Insight #3
Just because you have data you collected for one purpose does not mean you can use that data for another purpose.