Default-On AI: Are SaaS Vendors Outsourcing Their Risk To You?
SaaS vendors are increasingly enabling AI features by default without adequate notice, shifting security and compliance risks to enterprise administrators.Summary
A new normal in enterprise SaaS involves vendors enabling AI features by default, often without sufficient notice or time for IT teams to react. This trend is evident in platforms like Zoom, Microsoft 365, and Google Workspace, where administrative controls are frequently set to 'on' by default. The consequences are significant, including potential legal exposure due to wiretap laws, data sprawl, and a heavy administrative burden. The author argues that vendors should ship AI features off by default and provide better communication, risk matrices, and training materials. Ultimately, CIOs and CISOs must proactively manage these risks by assuming new features are already active and treating tenant configuration reviews as a recurring operational task.
(Source：Forbes)