Signal A telecom security chief treats AI risk as an extension of software lifecycle discipline

Summary

Deloitte argues that most practices needed to secure AI deployments are not new but are being updated for AI risks. It cites Rich Baich, senior vice president and chief information security officer at AT&T, whose approach to AI risk leans heavily on established cybersecurity practice. In particular, he enforces strong software development life cycle controls. Every tool, whether built in-house or supplied by a vendor, must be tested, red-teamed, meet architectural requirements and have access controls before it is used. Baich says this lets his team bring in the AI tools it needs to innovate without creating new problems. In his view today's experience is not much different from the past, and the only real difference AI brings is speed and impact.