{"id":20060,"date":"2026-09-15T13:00:23","date_gmt":"2026-09-15T11:00:23","guid":{"rendered":"https:\/\/www.asecus.ch\/?page_id=20060"},"modified":"2026-09-15T13:35:50","modified_gmt":"2026-09-15T11:35:50","slug":"faq-ai-security","status":"publish","type":"page","link":"https:\/\/www.asecus.ch\/en\/faq\/faq-ai-security\/","title":{"rendered":"Frequently asked questions about AI Security"},"content":{"rendered":"\n<style type=\"text\/css\" data-created_by=\"avia_inline_auto\" id=\"style-css-av-mtih5byj-3c7d74330b7dd75d5158d0da0dfb166a\">\n.avia-section.av-mtih5byj-3c7d74330b7dd75d5158d0da0dfb166a{\nbackground-repeat:no-repeat;\nbackground-image:url(https:\/\/www.asecus.ch\/wp-content\/uploads\/2022\/06\/header-partner.avif);\nbackground-position:50% 0%;\nbackground-attachment:scroll;\n}\n.avia-section.av-mtih5byj-3c7d74330b7dd75d5158d0da0dfb166a .av-section-color-overlay{\nopacity:0.6;\nbackground-color:#05668d;\n}\n<\/style>\n<div id='av_section_1'  class='avia-section av-mtih5byj-3c7d74330b7dd75d5158d0da0dfb166a main_color avia-section-default avia-no-border-styling  avia-builder-el-0  el_before_av_textblock  avia-builder-el-first  faq-hero avia-full-stretch avia-bg-style-scroll av-section-color-overlay-active av-minimum-height av-minimum-height-custom av-height-custom  container_wrap fullsize'  data-section-bg-repeat='stretch' data-av_minimum_height_px='400'><div class=\"av-section-color-overlay-wrap\"><div class=\"av-section-color-overlay\"><\/div><div class='container av-section-cont-open' style='height:400px'><main  role=\"main\" itemprop=\"mainContentOfPage\"  class='template-page content  av-content-full alpha units'><div class='post-entry post-entry-type-page post-entry-20060'><div class='entry-content-wrapper clearfix'>\n\n<style type=\"text\/css\" data-created_by=\"avia_inline_auto\" id=\"style-css-av-j53vtvp-cb6b89cc9aa1125c0cb45710d59cdb06\">\n#top .av-special-heading.av-j53vtvp-cb6b89cc9aa1125c0cb45710d59cdb06{\npadding-bottom:0;\ncolor:#ffffff;\nfont-size:70px;\n}\nbody .av-special-heading.av-j53vtvp-cb6b89cc9aa1125c0cb45710d59cdb06 .av-special-heading-tag .heading-char{\nfont-size:25px;\n}\n#top #wrap_all .av-special-heading.av-j53vtvp-cb6b89cc9aa1125c0cb45710d59cdb06 .av-special-heading-tag{\nfont-size:70px;\n}\n.av-special-heading.av-j53vtvp-cb6b89cc9aa1125c0cb45710d59cdb06 .special-heading-inner-border{\nborder-color:#ffffff;\n}\n.av-special-heading.av-j53vtvp-cb6b89cc9aa1125c0cb45710d59cdb06 .av-subheading{\nfont-size:18px;\n}\n\n@media only screen and (max-width: 479px){ \n#top #wrap_all .av-special-heading.av-j53vtvp-cb6b89cc9aa1125c0cb45710d59cdb06 .av-special-heading-tag{\nfont-size:40px;\npadding:0 0 185px 0;\n}\n.av-special-heading.av-j53vtvp-cb6b89cc9aa1125c0cb45710d59cdb06 .av-subheading{\ndisplay:none;\n}\n}\n\n@media only screen and (min-width: 480px) and (max-width: 767px){ \n#top #wrap_all .av-special-heading.av-j53vtvp-cb6b89cc9aa1125c0cb45710d59cdb06 .av-special-heading-tag{\nfont-size:0.8em;\n}\n}\n<\/style>\n<div  class='av-special-heading av-j53vtvp-cb6b89cc9aa1125c0cb45710d59cdb06 av-special-heading-h1 custom-color-heading blockquote modern-quote  avia-builder-el-1  avia-builder-el-no-sibling  top-special-heading av-inherit-size'><h1 class='av-special-heading-tag '  itemprop=\"headline\"  >Frequently asked questions about AI Security<\/h1><div class='av_custom_color av-subheading av-subheading_below'><p>Answers about AI Security<\/p>\n<\/div><div class=\"special-heading-border\"><div class=\"special-heading-inner-border\"><\/div><\/div><\/div>\n<\/div><\/div><\/main><!-- close content main element --><\/div><\/div><\/div><div id='after_section_1'  class='main_color av_default_container_wrap container_wrap fullsize'  ><div class='container av-section-cont-open' ><div class='template-page content  av-content-full alpha units'><div class='post-entry post-entry-type-page post-entry-20060'><div class='entry-content-wrapper clearfix'>\n<section  class='av_textblock_section av-isz8ith-04cc31d81f93b0127c6444b253c5e9f9 '   itemscope=\"itemscope\" itemtype=\"https:\/\/schema.org\/CreativeWork\" ><div class='av-mini-hide avia_textblock'  itemprop=\"text\" ><div class=\"breadcrumb breadcrumbs avia-breadcrumbs\"><div class=\"breadcrumb-trail\" ><span class=\"trail-before\"><span class=\"breadcrumb-title\">You are here:<\/span><\/span> <span  itemscope=\"itemscope\" itemtype=\"https:\/\/schema.org\/BreadcrumbList\" ><span  itemscope=\"itemscope\" itemtype=\"https:\/\/schema.org\/ListItem\" itemprop=\"itemListElement\" ><a itemprop=\"url\" href=\"https:\/\/www.asecus.ch\/en\/\" title=\"Asecus\" rel=\"home\" class=\"trail-begin\"><span itemprop=\"name\">Home<\/span><\/a><span itemprop=\"position\" class=\"hidden\">1<\/span><\/span><\/span><\/div><\/div>\n<\/div><\/section>\n<\/div><\/div><\/div><!-- close content main div --><\/div><\/div>\n<style type=\"text\/css\" data-created_by=\"avia_inline_auto\" id=\"style-css-av-i7urjtx-5e3c2d601e460e350b89fac835aed6a2\">\n.avia-section.av-i7urjtx-5e3c2d601e460e350b89fac835aed6a2{\nbackground-color:#f8f8f8;\nbackground-image:unset;\nmargin-top:0px;\nmargin-bottom:0px;\n}\n<\/style>\n<div id='page-partner'  class='avia-section av-i7urjtx-5e3c2d601e460e350b89fac835aed6a2 alternate_color avia-section-no-padding avia-no-border-styling  avia-builder-el-3  el_after_av_textblock  el_before_av_hr  bottom-padding-products avia-bg-style-scroll container_wrap fullsize'  ><div class='container av-section-cont-open' ><div class='template-page content  av-content-full alpha units'><div class='post-entry post-entry-type-page post-entry-20060'><div class='entry-content-wrapper clearfix'>\n<div  class='flex_column av-19dd07v-b2854a38d5e2819960e1986820ba202c av_three_fourth  avia-builder-el-4  el_before_av_one_fourth  avia-builder-el-first  first flex_column_div  '     ><p>\n<style type=\"text\/css\" data-created_by=\"avia_inline_auto\" id=\"style-css-av-h25y23p-5e46b1db9f2021762a50f65b3804031e\">\n#top .av-special-heading.av-h25y23p-5e46b1db9f2021762a50f65b3804031e{\nmargin:50px 0px 20px 0px;\npadding-bottom:0;\n}\nbody .av-special-heading.av-h25y23p-5e46b1db9f2021762a50f65b3804031e .av-special-heading-tag .heading-char{\nfont-size:25px;\n}\n.av-special-heading.av-h25y23p-5e46b1db9f2021762a50f65b3804031e .av-subheading{\nfont-size:15px;\n}\n<\/style>\n<div  class='av-special-heading av-h25y23p-5e46b1db9f2021762a50f65b3804031e av-special-heading-h2 blockquote modern-quote  avia-builder-el-5  el_before_av_textblock  avia-builder-el-first '><h2 class='av-special-heading-tag '  itemprop=\"headline\"  >AI Security FAQ: Risks of GenAI, Shadow AI and AI agents<\/h2><div class=\"special-heading-border\"><div class=\"special-heading-inner-border\"><\/div><\/div><\/div><br \/>\n\n<style type=\"text\/css\" data-created_by=\"avia_inline_auto\" id=\"style-css-av-guwc6w5-0bf44e1426159639543fc8bb54386b20\">\n\n@media only screen and (max-width: 479px){ \n#top .av_textblock_section.av-guwc6w5-0bf44e1426159639543fc8bb54386b20 .avia_textblock{\nfont-size:16px;\n}\n}\n<\/style>\n<section  class='av_textblock_section av-guwc6w5-0bf44e1426159639543fc8bb54386b20 '   itemscope=\"itemscope\" itemtype=\"https:\/\/schema.org\/CreativeWork\" ><div class='avia_textblock faq-intro'  itemprop=\"text\" ><p>GenAI tools and AI agents such as ChatGPT, Copilot or Claude Code create new opportunities, but they also introduce new security risks &#8211; from data leakage via prompts to excessive access rights for autonomous agents. Our FAQs answer questions about identifying Shadow AI and using AI securely and in a controlled way within the company.<\/p>\n<\/div><\/section><\/p><\/div><div  class='flex_column av-ivgasb-b5bcbee721b5dd93c03e62bdee269304 av_one_fourth  avia-builder-el-7  el_after_av_three_fourth  el_before_av_one_full  flex_column_div  '     ><style type=\"text\/css\" data-created_by=\"avia_inline_auto\" id=\"style-css-av-mtiqnggf-2da23f109b3a07c618561827343de7e5\">\n.avia-image-container.av-mtiqnggf-2da23f109b3a07c618561827343de7e5 img.avia_image{\nbox-shadow:none;\n}\n.avia-image-container.av-mtiqnggf-2da23f109b3a07c618561827343de7e5 .av-image-caption-overlay-center{\ncolor:#ffffff;\n}\n<\/style>\n<div  class='avia-image-container av-mtiqnggf-2da23f109b3a07c618561827343de7e5 av-styling- avia-align-center  avia-builder-el-8  avia-builder-el-no-sibling  faq-topic-icon'   itemprop=\"image\" itemscope=\"itemscope\" itemtype=\"https:\/\/schema.org\/ImageObject\" ><div class=\"avia-image-container-inner\"><div class=\"avia-image-overlay-wrap\"><img decoding=\"async\" fetchpriority=\"high\" class='wp-image-18062 avia-img-lazy-loading-not-18062 avia_image ' src=\"https:\/\/www.asecus.ch\/wp-content\/uploads\/2026\/03\/ai-security-1.svg\" alt='Symbol f\u00fcr KI-Sicherheit und vernetzten Schutz' title='ai-security'   itemprop=\"thumbnailUrl\"  \/><\/div><\/div><\/div><\/div>\n<style type=\"text\/css\" data-created_by=\"avia_inline_auto\" id=\"style-css-av-ht8c2qt-d2b5dd20c3c11453d4378c4cd46daf25\">\n.flex_column.av-ht8c2qt-d2b5dd20c3c11453d4378c4cd46daf25{\nborder-radius:0px 0px 0px 0px;\npadding:0px 0px 0px 0px;\n}\n<\/style>\n<div  class='flex_column av-ht8c2qt-d2b5dd20c3c11453d4378c4cd46daf25 av_one_full  avia-builder-el-9  el_after_av_one_fourth  avia-builder-el-last  first flex_column_div av-zero-column-padding  column-top-margin'     ><style type=\"text\/css\" data-created_by=\"avia_inline_auto\" id=\"style-css-av-mtipmkrv-0a28eae42255897d4e23a1a9b4e46918\">\n#top .av_textblock_section.av-mtipmkrv-0a28eae42255897d4e23a1a9b4e46918 .avia_textblock{\ntext-align:left;\n}\n<\/style>\n<section  class='av_textblock_section av-mtipmkrv-0a28eae42255897d4e23a1a9b4e46918 '   itemscope=\"itemscope\" itemtype=\"https:\/\/schema.org\/CreativeWork\" ><div class='avia_textblock faq-content'  itemprop=\"text\" ><p style=\"text-align: left;\"><style id=\"ea_dynamic_css20075\">#sp-ea-20075 .spcollapsing{height: 0; overflow: hidden; transition-property: height; transition-duration: 300ms;}#sp-ea-20075.sp-easy-accordion>.sp-ea-single.eap_inactive>.ea-header a {background-color: #bb0000 !important; color: #fff !important;}#sp-ea-20075.sp-easy-accordion>.sp-ea-single{ margin-bottom: 10px; border: 1px solid #e2e2e2; border-radius: 3px;}#sp-ea-20075.sp-easy-accordion>.sp-ea-single.ea-expand{ border-color: #e2e2e2;}#sp-ea-20075.sp-easy-accordion>.sp-ea-single:hover{ border-color: #bfbfbf;}#sp-ea-20075.sp-easy-accordion>.sp-ea-single>.ea-header a {background: ;}#sp-ea-20075.sp-easy-accordion>.sp-ea-single.ea-expand>.ea-header a {background: #eee;}#sp-ea-20075.sp-easy-accordion>.sp-ea-single>.ea-header:hover a {background: ;}#sp-ea-20075.sp-easy-accordion>.sp-ea-single>.ea-header a .eap-title-icon { color: #444;font-size: 20px;} #sp-ea-20075.sp-easy-accordion>.sp-ea-single>.ea-header a .eap-title-custom-icon {max-width: 20px;}#sp-ea-20075.sp-easy-accordion>.sp-ea-single>.ea-header:hover a .eap-title-icon {color: #444;}#sp-ea-20075.sp-easy-accordion>.sp-ea-single.ea-expand>.ea-header a .eap-title-icon {color: #444;}#sp-ea-20075.sp-easy-accordion>.sp-ea-single>.ea-header a {padding: 15px 15px 15px 15px; color: #444; font-size: 20px; line-height: 30px; text-align: left; letter-spacing: 0px; text-transform: none;}#sp-ea-20075.sp-easy-accordion>.sp-ea-single>.ea-header:hover a {color: ;}#sp-ea-20075.sp-easy-accordion>.sp-ea-single.ea-expand>.ea-header a {color: ;}#sp-ea-20075.sp-easy-accordion>.sp-ea-single>.sp-collapse>.ea-body p,#sp-ea-20075.sp-easy-accordion>.sp-ea-single>.sp-collapse>.ea-body{background: #fff; padding: 15px 15px 15px 15px; border-radius: 0 0 3px 3px; color: #444; font-size: 16px; text-align: left; letter-spacing: 0px; line-height: 26px; animation-delay: 200ms; text-transform: none;}#sp-ea-20075.sp-easy-accordion>.sp-ea-single>.ea-header a .ea-expand-icon.fa:before {color: ; font-size: 16px; font-style: normal;}#sp-ea-20075.sp-easy-accordion>.sp-ea-single>.ea-header:hover a .ea-expand-icon.fa:before {color: ;}#sp-ea-20075.sp-easy-accordion>.sp-ea-single.ea-expand>.ea-header a .ea-expand-icon.fa:before {color: ;}#sp-ea-20075.sp-easy-accordion>.sp-ea-single{border-radius: 3px; border: 1px solid #e2e2e2;}#sp-ea-20075.sp-easy-accordion>.sp-ea-single>.sp-collapse>.ea-body{border-radius: 0 0 3px 3px; border: none;}#sp-ea-20075.sp-easy-accordion>.sp-ea-single>.ea-header a .ea-expand-icon.fa {float: left; margin-right: 10px;}#sp-ea-20075 #eap_faq_search_bar_container {display:none; opacity:0;}#sp-ea-20075 #eap_faq_search_bar_container span::before{content:\"\";}#sp-ea-20075.sp-easy-accordion>.sp-ea-single>.sp-collapse>.ea-body p{ padding:0px}#sp-eap-accordion-section-20075.sp-eap-container .sp-eap-infinite-scroll-loader,#sp-eap-accordion-section-20075.sp-eap-container div:is(.sp-eap-load-more,.sp-eap-ajax-number-pagination){text-align:center;}#sp-ea-20075>.sp-ea-single>.sp-collapse>.ea-body .eap-product-price {color: #444;}#sp-ea-20075.sp-easy-accordion>.sp-ea-single>.sp-collapse>.ea-body .eap-product-price del{color: rgba(68,68,68,0.71);}#sp-ea-20075.sp-easy-accordion>.sp-ea-single>.sp-collapse>.ea-body .eap-product-cart-button .woocommerce a { border: 1px solid #DAD6DA;border-radius: 2px;background-color: transparent;color: #444;}#sp-ea-20075.sp-easy-accordion>.sp-ea-single>.sp-collapse>.ea-body .eap-product-cart-button .woocommerce a:hover { border-color: #444;background-color: #444;color: #fff;}#sp-ea-20075.sp-easy-accordion>.sp-ea-single>>.sp-collapse>.ea-body .eap-product-cart-button .eap-product-quantity .eap_input_text {border: 1px solid #DAD6DA;}#sp-ea-20075.sp-easy-accordion>.sp-ea-single>.sp-collapse>.ea-body .eap-product-cart-button a.add_to_cart_button{position: relative;}<\/style><div id=\"sp-eap-accordion-section-20075\" class=\"sp-eap-container\"><div id=\"sp-ea-20075\" class=\"sp-ea-one sp-easy-accordion eap_title_to_slug\" data-ex-icon=\"ea-font-icon-minus_regular\" data-col-icon=\"ea-font-icon-plus_regular\" data-ea-active=\"ea-click\" data-ea-mode=\"vertical\" data-ea-multi-column=\"\" data-ea-coll=\"\" data-keep-accordion=\"\" data-autoclose=\"\" data-preloader=\"\" data-scroll-active-item=\"\" data-offset-to-scroll=\"0\" data-autoplaytime=\"3000\" data-expand=\"\" data-post-id=\"20075\" data-accordion_mode=\"ea-all-close\">\t<div class=\"ea-card  sp-ea-single\"  data-accordion-id= \"0\">\n\n\t\t<h3 class=\"ea-header\">\n\t\t\t<a class=\"collapsed\" data-sptoggle=\"spcollapse\" rel=\"nofollow\" data-sptarget=\"#collapse200750\" href=\"#\" data-title=\"efaq-what-new-risks-arise-from-using-genai-tools-such-as-chatgpt-or-copilot-in-our-company\" aria-expanded=\"false\">\n\t\t\t\t<i class=\"ea-expand-icon fa ea-font-icon-plus_regular\"><\/i>  What new risks arise from using GenAI tools such as ChatGPT or Copilot in our company?\t\t\t<\/a>\n\t\t<\/h3>\n\n\t\t<div class=\"sp-collapse spcollapse spcollapse\" id=\"collapse200750\" data-parent=\"#sp-ea-20075\">\n\t\t<div class=\"ea-body\"> \n<div class=\"ea-content-wrapper \"> \n\t<p>The biggest risks are data leakage via prompts, for example when confidential information is entered into external models, compliance violations when processing personal data, and a lack of transparency about which employees are using which AI tools at all, also known as Shadow AI. Without control mechanisms, companies lose visibility over sensitive data leaving the organisation.<\/p>\n<\/div>\n<\/div>\n\t\t\t<\/div>\n\t<\/div>\n\t\t<div class=\"ea-card  sp-ea-single\"  data-accordion-id= \"1\">\n\n\t\t<h3 class=\"ea-header\">\n\t\t\t<a class=\"collapsed\" data-sptoggle=\"spcollapse\" rel=\"nofollow\" data-sptarget=\"#collapse200751\" href=\"#\" data-title=\"efaq-is-an-ai-policy-enough-to-control-the-risks-of-genai\" aria-expanded=\"false\">\n\t\t\t\t<i class=\"ea-expand-icon fa ea-font-icon-plus_regular\"><\/i>  Is an AI policy enough to control the risks of GenAI?\t\t\t<\/a>\n\t\t<\/h3>\n\n\t\t<div class=\"sp-collapse spcollapse spcollapse\" id=\"collapse200751\" data-parent=\"#sp-ea-20075\">\n\t\t<div class=\"ea-body\"> \n<div class=\"ea-content-wrapper \"> \n\t<p>No. A policy provides important guardrails, but it cannot replace technical controls. An effective AI security concept combines governance and responsibilities with awareness, technical protection measures and continuous monitoring.<\/p>\n<\/div>\n<\/div>\n\t\t\t<\/div>\n\t<\/div>\n\t\t<div class=\"ea-card  sp-ea-single\"  data-accordion-id= \"2\">\n\n\t\t<h3 class=\"ea-header\">\n\t\t\t<a class=\"collapsed\" data-sptoggle=\"spcollapse\" rel=\"nofollow\" data-sptarget=\"#collapse200752\" href=\"#\" data-title=\"efaq-how-can-we-use-ai-securely-and-in-a-controlled-way-within-the-company\" aria-expanded=\"false\">\n\t\t\t\t<i class=\"ea-expand-icon fa ea-font-icon-plus_regular\"><\/i>  How can we use AI securely and in a controlled way within the company?\t\t\t<\/a>\n\t\t<\/h3>\n\n\t\t<div class=\"sp-collapse spcollapse spcollapse\" id=\"collapse200752\" data-parent=\"#sp-ea-20075\">\n\t\t<div class=\"ea-body\"> \n<div class=\"ea-content-wrapper \"> \n\t<p>Secure AI usage starts with transparency and clear rules. Companies should know which AI services are being used, what data flows into them and which use cases are permitted. Based on this, technical controls, governance, training and monitoring can be established in a targeted way.<\/p>\n<\/div>\n<\/div>\n\t\t\t<\/div>\n\t<\/div>\n\t\t<div class=\"ea-card  sp-ea-single\"  data-accordion-id= \"3\">\n\n\t\t<h3 class=\"ea-header\">\n\t\t\t<a class=\"collapsed\" data-sptoggle=\"spcollapse\" rel=\"nofollow\" data-sptarget=\"#collapse200753\" href=\"#\" data-title=\"efaq-how-can-we-find-out-which-ai-tools-are-currently-being-used-in-our-company\" aria-expanded=\"false\">\n\t\t\t\t<i class=\"ea-expand-icon fa ea-font-icon-plus_regular\"><\/i>  How can we find out which AI tools are currently being used in our company?\t\t\t<\/a>\n\t\t<\/h3>\n\n\t\t<div class=\"sp-collapse spcollapse spcollapse\" id=\"collapse200753\" data-parent=\"#sp-ea-20075\">\n\t\t<div class=\"ea-body\"> \n<div class=\"ea-content-wrapper \"> \n\t<p>With an Asecus \u201cAI Discovery & Risk Check\u201d, you receive an analysis of the AI tools in use and of your ability to detect them. This gives you a fact-based overview of which tools are being used, by whom, and what risks are associated with them - as a basis for a company-wide AI policy.<\/p>\n<\/div>\n<\/div>\n\t\t\t<\/div>\n\t<\/div>\n\t\t<div class=\"ea-card  sp-ea-single\"  data-accordion-id= \"4\">\n\n\t\t<h3 class=\"ea-header\">\n\t\t\t<a class=\"collapsed\" data-sptoggle=\"spcollapse\" rel=\"nofollow\" data-sptarget=\"#collapse200754\" href=\"#\" data-title=\"efaq-how-can-we-prevent-confidential-company-data-from-leaving-the-organisation-via-ai-prompts\" aria-expanded=\"false\">\n\t\t\t\t<i class=\"ea-expand-icon fa ea-font-icon-plus_regular\"><\/i>  How can we prevent confidential company data from leaving the organisation via AI prompts?\t\t\t<\/a>\n\t\t<\/h3>\n\n\t\t<div class=\"sp-collapse spcollapse spcollapse\" id=\"collapse200754\" data-parent=\"#sp-ea-20075\">\n\t\t<div class=\"ea-body\"> \n<div class=\"ea-content-wrapper \"> \n\t<p>In addition to clear guidelines, a combination of technical and organisational measures is required: DLP solutions that detect AI applications and control data input, CASB\/SSE functionalities to manage access to AI services, as well as clear policies and awareness training for employees. It is important to consider not only known web applications, but also AI functions in SaaS applications, development tools, agents and plugins.<\/p>\n<\/div>\n<\/div>\n\t\t\t<\/div>\n\t<\/div>\n\t\t<div class=\"ea-card  sp-ea-single\"  data-accordion-id= \"5\">\n\n\t\t<h3 class=\"ea-header\">\n\t\t\t<a class=\"collapsed\" data-sptoggle=\"spcollapse\" rel=\"nofollow\" data-sptarget=\"#collapse200755\" href=\"#\" data-title=\"efaq-what-is-agentic-ai-and-why-is-it-a-different-security-challenge-from-traditional-genai-usage\" aria-expanded=\"false\">\n\t\t\t\t<i class=\"ea-expand-icon fa ea-font-icon-plus_regular\"><\/i>  What is Agentic AI, and why is it a different security challenge from traditional GenAI usage?\t\t\t<\/a>\n\t\t<\/h3>\n\n\t\t<div class=\"sp-collapse spcollapse spcollapse\" id=\"collapse200755\" data-parent=\"#sp-ea-20075\">\n\t\t<div class=\"ea-body\"> \n<div class=\"ea-content-wrapper \"> \n\t<p>Agentic AI describes AI systems that can independently perform actions, call tools and make decisions - not just generate text. As a result, agents often receive extensive permissions, such as access to systems, APIs and data. This creates new attack surfaces, including prompt injection, unintended action chains and privilege escalation. Governance and access controls must therefore be expanded accordingly.<\/p>\n<\/div>\n<\/div>\n\t\t\t<\/div>\n\t<\/div>\n\t\t<div class=\"ea-card  sp-ea-single\"  data-accordion-id= \"6\">\n\n\t\t<h3 class=\"ea-header\">\n\t\t\t<a class=\"collapsed\" data-sptoggle=\"spcollapse\" rel=\"nofollow\" data-sptarget=\"#collapse200756\" href=\"#\" data-title=\"efaq-what-new-security-risks-arise-from-ai-agents-and-agentic-ai\" aria-expanded=\"false\">\n\t\t\t\t<i class=\"ea-expand-icon fa ea-font-icon-plus_regular\"><\/i>  What new security risks arise from AI agents and Agentic AI?\t\t\t<\/a>\n\t\t<\/h3>\n\n\t\t<div class=\"sp-collapse spcollapse spcollapse\" id=\"collapse200756\" data-parent=\"#sp-ea-20075\">\n\t\t<div class=\"ea-body\"> \n<div class=\"ea-content-wrapper \"> \n\t<p>AI agents can independently access data, applications and interfaces and carry out actions. This creates new risks around permissions, data leakage, manipulated inputs, unintended actions and a lack of traceability. It is therefore essential to treat agents similarly to privileged digital identities and to consistently control their access.<\/p>\n<\/div>\n<\/div>\n\t\t\t<\/div>\n\t<\/div>\n\t\t<div class=\"ea-card  sp-ea-single\"  data-accordion-id= \"7\">\n\n\t\t<h3 class=\"ea-header\">\n\t\t\t<a class=\"collapsed\" data-sptoggle=\"spcollapse\" rel=\"nofollow\" data-sptarget=\"#collapse200757\" href=\"#\" data-title=\"efaq-our-developers-increasingly-use-ai-coding-agents-such-as-claude-code-github-copilot-or-codex-what-specific-risks-does-this-create\" aria-expanded=\"false\">\n\t\t\t\t<i class=\"ea-expand-icon fa ea-font-icon-plus_regular\"><\/i>  Our developers increasingly use AI coding agents such as Claude Code, GitHub Copilot or Codex. What specific risks does this create?\t\t\t<\/a>\n\t\t<\/h3>\n\n\t\t<div class=\"sp-collapse spcollapse spcollapse\" id=\"collapse200757\" data-parent=\"#sp-ea-20075\">\n\t\t<div class=\"ea-body\"> \n<div class=\"ea-content-wrapper \"> \n\t<p>AI coding agents often receive extensive access to source code, repositories, environment variables and sometimes even production systems in order to perform tasks independently. This increases the risk of unintended leakage of trade secrets and credentials, the introduction of insecure or vulnerable code, and unintended actions caused by faulty agent logic or prompt injection from manipulated code or dependencies. In addition, many companies lack transparency about which agents are in use and what permissions they have.<\/p>\n<\/div>\n<\/div>\n\t\t\t<\/div>\n\t<\/div>\n\t\t<div class=\"ea-card  sp-ea-single\"  data-accordion-id= \"8\">\n\n\t\t<h3 class=\"ea-header\">\n\t\t\t<a class=\"collapsed\" data-sptoggle=\"spcollapse\" rel=\"nofollow\" data-sptarget=\"#collapse200758\" href=\"#\" data-title=\"efaq-how-can-we-reduce-the-risks-of-ai-coding-agents-without-losing-the-productivity-benefits\" aria-expanded=\"false\">\n\t\t\t\t<i class=\"ea-expand-icon fa ea-font-icon-plus_regular\"><\/i>  How can we reduce the risks of AI coding agents without losing the productivity benefits?\t\t\t<\/a>\n\t\t<\/h3>\n\n\t\t<div class=\"sp-collapse spcollapse spcollapse\" id=\"collapse200758\" data-parent=\"#sp-ea-20075\">\n\t\t<div class=\"ea-body\"> \n<div class=\"ea-content-wrapper \"> \n\t<p>Proven measures include clearly defined permission boundaries based on least privilege, especially separated from production systems and without direct access to secrets, mandatory human code review before every merge, and automated scans such as SAST and secret scanning for agent-generated code. In addition, a company-wide policy for the use of coding agents is recommended, including logging and monitoring of agent activities in order to detect anomalies at an early stage.<\/p>\n<\/div>\n<\/div>\n\t\t\t<\/div>\n\t<\/div>\n\t\t<div class=\"ea-card  sp-ea-single\"  data-accordion-id= \"9\">\n\n\t\t<h3 class=\"ea-header\">\n\t\t\t<a class=\"collapsed\" data-sptoggle=\"spcollapse\" rel=\"nofollow\" data-sptarget=\"#collapse200759\" href=\"#\" data-title=\"efaq-where-should-we-start-with-ai-security-if-we-do-not-yet-have-a-strategy\" aria-expanded=\"false\">\n\t\t\t\t<i class=\"ea-expand-icon fa ea-font-icon-plus_regular\"><\/i>  Where should we start with AI Security if we do not yet have a strategy?\t\t\t<\/a>\n\t\t<\/h3>\n\n\t\t<div class=\"sp-collapse spcollapse spcollapse\" id=\"collapse200759\" data-parent=\"#sp-ea-20075\">\n\t\t<div class=\"ea-body\"> \n<div class=\"ea-content-wrapper \"> \n\t<p>The first step is an inventory: Which AI tools and use cases already exist, what data is being processed, and what risks arise from this? Only with this transparency can companies decide where organisational or technical measures are actually needed. This is exactly the approach followed by the Asecus \u201cAI Discovery &amp; Risk Check\u201d.<\/p>\n<\/div>\n<\/div>\n\t\t\t<\/div>\n\t<\/div>\n\t<\/div><\/div><\/p>\n<\/div><\/section><\/div><\/div><\/div><\/div><!-- close content main div --><\/div><\/div><div id='after_section_2'  class='main_color av_default_container_wrap container_wrap fullsize'  ><div class='container av-section-cont-open' ><div class='template-page content  av-content-full alpha units'><div class='post-entry post-entry-type-page post-entry-20060'><div class='entry-content-wrapper clearfix'>\n<style type=\"text\/css\" data-created_by=\"avia_inline_auto\" id=\"style-css-av-jgvw4l-785d1a727834de8a0eb2c78cc4a49672\">\n#top .hr.hr-invisible.av-jgvw4l-785d1a727834de8a0eb2c78cc4a49672{\nheight:20px;\n}\n<\/style>\n<div  class='hr av-jgvw4l-785d1a727834de8a0eb2c78cc4a49672 hr-invisible  avia-builder-el-11  el_after_av_section  avia-builder-el-no-sibling  av-mini-hide'><span class='hr-inner '><span class=\"hr-inner-style\"><\/span><\/span><\/div><\/p>\n","protected":false},"excerpt":{"rendered":"","protected":false},"author":10,"featured_media":0,"parent":20089,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"","meta":{"content-type":"","footnotes":""},"class_list":["post-20060","page","type-page","status-publish","hentry"],"_links":{"self":[{"href":"https:\/\/www.asecus.ch\/en\/wp-json\/wp\/v2\/pages\/20060","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.asecus.ch\/en\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/www.asecus.ch\/en\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/www.asecus.ch\/en\/wp-json\/wp\/v2\/users\/10"}],"replies":[{"embeddable":true,"href":"https:\/\/www.asecus.ch\/en\/wp-json\/wp\/v2\/comments?post=20060"}],"version-history":[{"count":8,"href":"https:\/\/www.asecus.ch\/en\/wp-json\/wp\/v2\/pages\/20060\/revisions"}],"predecessor-version":[{"id":20087,"href":"https:\/\/www.asecus.ch\/en\/wp-json\/wp\/v2\/pages\/20060\/revisions\/20087"}],"up":[{"embeddable":true,"href":"https:\/\/www.asecus.ch\/en\/wp-json\/wp\/v2\/pages\/20089"}],"wp:attachment":[{"href":"https:\/\/www.asecus.ch\/en\/wp-json\/wp\/v2\/media?parent=20060"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}