Journal
Zenodo (CERN European Organization for Nuclear Research)
Publisher
European Organization for Nuclear Research
Record source
OpenAlex Research Library
Abstract / Description
Artificial intelligence is moving from isolated experimentation into everyday enterprise workflows, knowledge repositories, business applications, and increasingly agentic systems. This paper argues that secure AI adoption should be treated as an enterprise governance and business-risk issue rather than as a narrowly scoped information-technology project. It proposes the Five Pillars of Secure AI Adoption, an author-developed framework comprising governance and accountability, data protection, identity and least privilege, AI-specific security controls, and monitoring and incident response. The framework provides an executive-oriented operating model informed by established resources, including the NIST AI Risk Management Framework, the NIST Generative AI Profile, ISO/IEC 42001, and OWASP guidance for large-language-model and generative-AI application security. The paper concludes that security should enable responsible AI innovation through explicit ownership, controlled access, bounded agency, AI-aware safeguards, and observable operations.