--- title: Data-Centric Security Approach to AI Security Risks | comforte description: Cybersecurity for AI is a rapidly maturing space. But there are still things organizations can do to help mitigate some of the associated AI Security risks. image: https://insights.comforte.com/hubfs/comforteAG_Blog_09.03.23_v1.1.jpeg --- [![Hubspot_blog_logo](https://insights.comforte.com/hs-fs/hubfs/Hubspot_blog_logo.png?width=295&name=Hubspot_blog_logo.png)](http://www.comforte.com) [![Subscribe](https://no-cache.hubspot.com/cta/default/4026697/ba125972-4bdc-4e47-b9a9-81df496120a0.png)](https://cta-redirect.hubspot.com/cta/redirect/4026697/ba125972-4bdc-4e47-b9a9-81df496120a0) [![comforte AG - AI Means Business, So Start with Data-Centric Security](https://insights.comforte.com/hubfs/comforteAG_Blog_09.03.23_v1.1.jpeg)](https://insights.comforte.com/ai-means-business-so-start-with-data-centric-security) [Erfan Shadabi](https://insights.comforte.com/author/erfan-shadabi) l Mar 9, 2023 l [Data Protection](https://insights.comforte.com/tag/data-protection), [Big Data Analytics](https://insights.comforte.com/tag/big-data-analytics), [AI](https://insights.comforte.com/tag/ai) # AI Means Business, So Start with a Data-Centric Security Approach to AI Security Risks Across the globe, organizations are waking up to the power of artificial intelligence (AI). Even before ChatGPT, the technology was starting to move from being an early adopter buzzword to something capable of affecting business transformation for the corporate masses. The market for AI software, hardware and services [is expected to hit](https://www.idc.com/getdoc.jsp?containerId=prUS48127321) yet another milestone – $500bn in value – by 2024, thanks to impressive double-digit growth. Yet however they’re deployed to drive business success, AI services are only as strong as the data that powers them. That means organizations wanting to extract maximum value from AI must also build security into projects from the start to help mitigate AI security risks and threats. A best practice layered approach must begin with securing the data itself - data-centric AI security. ## The power of AI We should all be aware by now of the value AI tools can provide to organizations – in both a customer-facing and back office context. One obvious advantage of chatbots like ChatGPT is in enhancing customer service with a realistic human-like interface to field queries and complaints. In doing so, it will free up staff to focus on higher-value tasks. AI-based automation could also reduce the manual, repetitive tasks some team members still have to undertake in industries like banking and retail – such as on- and offboarding customers and approving mortgages. This would also minimize human error and improve overall efficiency. A third output from AI tools – and perhaps the one business leaders are most excited about – revolves around decision-making. By applying the right algorithms to large datasets, companies can generate insight with which to make more successful decisions. For example, they can forecast multiple market scenarios to help predict stock levels, customer sentiment and pricing sensitivity – and adjust strategy accordingly. This will be an increasingly critical driver of agility – especially in times of tremendous business uncertainty and macro-economic volatility. ## Risk is everywhere: data security risks facing AI & machine learning applications Yet where there is data, there are inevitably risks over how it is used and who has access to it. Top AI data security risks include: 1. ### Model poisoning Model poisoning is a type of attack where threat actors deliberately inject malicious data into an AI or machine learning (ML) model, with the goal of compromising its performance. In most cases, the malicious data will either be significantly different from the distribution of the AI/ML’s training data or heavily biased leading the AI/ML system to misclassify the data and make unreliable decisions. 2. ### Data manipulation/tampering Data manipulation or tampering could occur before data is even fed into algorithms. It is a tactic used by threat actors to deceive an AI/machine learning model, sabotage results or influence other outcomes that the threat actor wants. 3. ### Data theft  AI and machine learning model data theft is a growing concern. This is the unauthorized access or extraction of sensitive data used to train AI and ML’s Personal and financial information fed into AI and ML systems could be sold on the cybercrime underground to fraudsters for use in follow-on phishing or identity fraud attacks. 4. ### Accidental disclosures Revealing sensitive data unintentionally is an ever-present risk and the result of human error. Accidental disclosures could be due to system misconfiguration or simply mishandling of data.  These AI data security risks could cause significant financial or reputational damage, especially if they invite the scrutiny of data protection regulators. [The GDPR usually requires](https://ico.org.uk/for-organisations/guide-to-data-protection/key-dp-themes/guidance-on-artificial-intelligence-and-data-protection/) organizations to tell data subjects if their information is to be used in an AI or ML system. It also demands firms properly handle and secure that data in line with principles like data minimization. ## Some AI security basics Cybersecurity for AI is a rapidly maturing space. But there are still things organizations can do today to help to mitigate some of the security risks of artificial intelligence outlined above.  ### These AI security best practices include: **Data-centric security:** Tokenization is one of the most effective ways to protect data. It converts plain text into a coded language, meaning if hackers get hold of it they will have nothing useful to use or sell. It’s perfect for use in AI systems as the data can still be used as normal, without compromising on protection. And tokenization can also reduce compliance scope, because the original data no longer exists. **Access controls**: Organizations should limit access to data based on the user's identity and role, according to the policy of least privilege. This ensures that only authorized users can access and use the data for the minimum time necessary to complete their work. Strong passwords should be enhanced with multi-factor authentication (MFA). **Regular audits:** These can help organizations to identify vulnerabilities and areas for improvement in their data protection policies and practices. It will also ensure that policies and procedures are being followed consistently. **Employee training:** Staff can be a weak link in corporate security, so regular training is essential to ensure that employees are aware of the importance of data protection, and are following policies. It should be regularly communicated to all staff, including contractors. **Monitoring and logging:** Logging tools collect data on security “events” – everything from emails to logins. Monitoring tools then sift through these logs in real-time to alert teams about suspicious behavior such as unauthorized access or account usage. Securing your AI and machine learning systems before introducing them to the core operations of your organization. Learn more by [contacting the experts at comforte](https://www.comforte.com/contact). --- | Share this:  | [![LinkedIn](https://insights.comforte.com/hubfs/Social%20Icons/linkedin%20icon.png)](https://www.linkedin.com/shareArticle?mini=true&url=https://insights.comforte.com/ai-means-business-so-start-with-data-centric-security&utm_medium=social&utm_source=linkedin) | [![Bluesky](https://insights.comforte.com/hubfs/Social%20Icons/bluesky_logo.png)](https://bsky.app/intent/compose?url=https://insights.comforte.com/ai-means-business-so-start-with-data-centric-security&utm_medium=social&utm_source=Bluesky) | ![Twitter](https://insights.comforte.com/hubfs/Social%20Icons/twitter_x_logo-1.png) | [![XING](https://insights.comforte.com/hubfs/Social%20Icons/xing-color2.png)](https://www.xing.com/spi/shares/new?url=https://insights.comforte.com/ai-means-business-so-start-with-data-centric-security&utm_medium=social&utm_source=xing) | [![Email](https://insights.comforte.com/hubfs/Social%20Icons/email%20icon.png)](mailto:?subject=Check%20out%20https://insights.comforte.com/ai-means-business-so-start-with-data-centric-security&utm_medium=social&utm_source=email%20&body=Check%20out%20https://insights.comforte.com/ai-means-business-so-start-with-data-centric-security&utm_medium=social&utm_source=email) | | --- | --- | --- | --- | --- | --- | ## Want to learn more about securing Snowflake with comforte? Click the button below to download our solution brief: [![Download Solution Brief](https://no-cache.hubspot.com/cta/default/4026697/3c2260f4-3ee1-4b2b-bc07-d2437dc7ca01.png)](https://cta-redirect.hubspot.com/cta/redirect/4026697/3c2260f4-3ee1-4b2b-bc07-d2437dc7ca01) ### Related posts ![Reuse, Reward: How Banks Can Safely Unlock the Value of Their Data](https://insights.comforte.com/hubfs/comforte%20AG_%20Reuse%20Reward_%20How%20Banks%20Can%20Safely%20Unlock%20the%20Value%20of%20Their%20Data_03.2025.png) Mar 12, 2026 l [Data Protection](https://insights.comforte.com/tag/data-protection) , [Payments Transformation](https://insights.comforte.com/tag/payments-transformation) , [Business Value](https://insights.comforte.com/tag/business-value) ### [Reuse, Reward: How Banks Can Safely Unlock the Value of Their Data](https://insights.comforte.com/reuse-reward-how-banks-can-safely-unlock-the-value-of-their-data?hsLang=en) The financial world is awash with data. But too few organizations are able to use it effectively. In [Bank Director’s *2025 Technology Survey*](https://www.bankdirector.com/wp-content/uploads/2025/09/2025TechReport-OpenVersion.pdf), one-third of US banking leaders cite an inability to harness data as a top technology challenge facing their... [Read more](https://insights.comforte.com/reuse-reward-how-banks-can-safely-unlock-the-value-of-their-data?hsLang=en) ![Delivering a Secure, Trusted Foundation for Cloud Growth at LGT](https://insights.comforte.com/hubfs/comforte%20AG_Delivering%20a%20Secure%2c%20Trusted%20Foundation%20for%20Cloud%20Growth%20at%20LGT_01.2026.png) Jan 15, 2026 l [Data Protection](https://insights.comforte.com/tag/data-protection) , [Business Value](https://insights.comforte.com/tag/business-value) ### [Delivering a Secure, Trusted Foundation for Cloud Growth at LGT](https://insights.comforte.com/delivering-a-secure-trusted-foundation-for-cloud-growth-at-lgt?hsLang=en) There’s a world of difference between retail and private banking. While the former is transactional and focused on the mass market, the latter is built on trust and personal relationships. That trust can be hard won, but is easily lost, especially... [Read more](https://insights.comforte.com/delivering-a-secure-trusted-foundation-for-cloud-growth-at-lgt?hsLang=en) ![Top Indicators You Have a Cybersecurity Problem—and What to Do About It](https://insights.comforte.com/hubfs/comforte%20AG_Top%20Indicators%20You%20Have%20a%20Cybersecurity%20Problem_and%20What%20to%20Do%20About%20It.png) May 22, 2025 l [Data Protection](https://insights.comforte.com/tag/data-protection) , [Digital Enablement](https://insights.comforte.com/tag/digital-enablement) ### [Top Indicators You Have a Cybersecurity Problem—and What to Do About It](https://insights.comforte.com/top-indicators-you-have-a-cybersecurity-problem-and-what-to-do-about-it?hsLang=en) Data is both blessing and curse to the modern enterprise. Yes, when analyzed effectively it can surface intelligence to improve decision making, customer engagement, process efficiency and, ultimately, drive revenue. But it also represents a major... [Read more](https://insights.comforte.com/top-indicators-you-have-a-cybersecurity-problem-and-what-to-do-about-it?hsLang=en) ### Service - [Contact](https://www.comforte.com/contact/) - [About us](https://www.comforte.com/company/) - [Blog](https://insights.comforte.com/) - [Press Releases](https://www.comforte.com/company/press-releases/) - [Career](https://www.comforte.com/company/career/) - [Resources](https://www.comforte.com/resources/) ### Germany comforte AG Abraham-Lincoln-Str. 22 65189 Wiesbaden Germany Phone: + 49 611 93199 00 Fax: + 49 611 93199 05 ### Australia comforte PTY Suite 20, 1 Rivett Road North Ryde NSW 2113 Australia Postal Address: PO Box 1710 Lane Cove NSW 1595 Australia Phone: +61 2 8197 0272 ### USA comforte Inc. 30 Wall Street, 8th Floor New York, NY 10005-2205 USA Phone: +1-646-438-5716 ### Singapore comforte Asia Pte. Ltd. 1 Raffles Place, #19-61 Tower 2  Singapore 048616 Phone: +65 6808 5507 - [Sitemap](https://www.comforte.com/sitemap/) - [Legal Notice](https://www.comforte.com/legal-notice/) - [Privacy Policy](https://www.comforte.com/privacy-policy/) © comforte AG 2026