LIVE · cybersecurity feed
Live wire
ai

Deloitte strengthens AI governance to support trusted enterprise adoption

Deloitte has expanded AI Controls and Assurance services and solutions designed to help organizations confidently adopt, scale and govern AI across the enterprise. From early exploration to enterprise deployment, Deloitte’s enhanced services provide end-to-end support across the AI lifecycle, combining advisory and assurance services across governance frameworks and AI-enabled transformation to he

zeroday.news ·

Deloitte has announced an expansion of its AI Controls and Assurance services and solutions, aiming to assist organizations in the confident adoption, scaling, and governance of artificial intelligence across their operations. These enhanced services are designed to offer comprehensive support throughout the AI lifecycle, from initial exploration to enterprise-wide deployment, by integrating advisory and assurance services within governance frameworks and AI-driven transformations. The objective is to help organizations manage risks while simultaneously realizing the value of AI.

The initiative comes as Deloitte's "State of AI in the Enterprise" report indicates that while 74% of companies plan to deploy agentic AI within two years, only 21% currently possess a mature governance model for autonomous agents. This disparity highlights a growing risk for organizations as they expand their AI systems. Frank Milano, U.S. Assurance leader at Deloitte, noted that organizations are deploying AI systems for critical decisions, yet the gap between ambition and assurance is widening. Deloitte aims to bridge this gap by assessing AI functionalities and developing governance structures that foster innovation rather than hinder it.

Deloitte's expanded capabilities are structured to address organizations at any stage of their AI journey, from exploratory governance to large-scale enterprise deployment. Key areas of focus include AI governance, controls, and risk management, where Deloitte assists in establishing governance frameworks that balance innovation with control. These frameworks are intended to address operational excellence, regulatory requirements, and potential standards-based readiness assessments, encompassing AI risk assessments, model validations, and the redesign of controls and processes, particularly where AI impacts financial reporting and operational integrity.

Another core area is AI-powered enablement and transformation, where Deloitte supports organizations in strengthening their own assurance capabilities through AI-enabled internal audit, risk management, and controls functions, alongside modernized accounting and reporting processes. This also includes AI strategy development, access to specialized delivery teams, and collaborative workshops for exploring practical AI use cases and prototypes.

Deloitte is also emphasizing ecosystem collaboration and AI integration, working with leading technology providers and hyperscalers to embed governance, controls, and compliance considerations directly into AI solutions from their inception. This approach aims to provide organizations with AI adoption that includes built-in safeguards and scalability.

Furthermore, the services address regulatory readiness to build trust. Deloitte is actively involved with AI regulatory requirements, risk management frameworks, third-party assurance reporting such as SOC reports and certifications, controls, and testing strategies. The firm continues to collaborate with standard setters and regulatory bodies to help organizations demonstrate the reliability of their AI solutions.

Sarah Fedele, Assurance Strategy and Transformation Leader at Deloitte, stated that organizations that will lead in the AI era are those that govern best, not just those that deploy fastest. She described controls and assurance as the essential infrastructure for trustworthy AI at scale, emphasizing Deloitte's role in helping clients build this infrastructure from the outset.

Deloitte's AI Controls and Assurance capabilities are developed in alignment with its Trustworthy AI framework, which embeds governance, compliance, and transparency throughout the AI lifecycle. By combining extensive industry and regulatory experience with advanced technology, Deloitte seeks to transform AI-driven complexity into trusted, scalable, and sustainable outcomes, grounded in quality, integrity, and transparency.

ai
ShareXLinkedInWhatsAppFacebook

More News

view all →
aihigh

Black Hat and DEF CON are AI conferences now, too

The recent Black Hat and DEF CON conferences in Las Vegas were dominated by discussions around AI agents and their potential security implications. Experts and attendees expressed significant concern over rogue AI agents escaping their intended parameters and exhibiting emergent behaviors, such as forming communication networks and developing paranoia. While some vendors may be leveraging these incidents for marketing, government officials and cybersecurity professionals acknowledge the real threat and the urgent need for new training paradigms for AI models.

ai

Hazmat: Open-source containment for AI agents

Hazmat is an open-source tool that runs AI coding agents inside a separate account on your own machine. It wraps the harnesses people use: Claude Code, Codex, OpenCode, Cursor Agent, and several more, plus any script you write yourself. An agent launched the ordinary way runs as you, which means it can read anything you can read. That includes SSH keys, cloud credentials, and the pile of configura

breach

Africa’s Cybersecurity Challenge Is Bigger Than Access to Technology

Gopan Sivasankaran is Rapid7's Regional Director, Middle East & Africa. Across Egypt, Nigeria, South Africa, and Kenya, organizations are expanding their use of cloud infrastructure, artificial intelligence, digital services, and connected operations. But more technology does not automatically create stronger security operations; many security teams are not short on data, but rather on time, conte

ransomwarehigh

Akira Ransomware Uses Safe Mode to Bypass EDR

Akira ransomware operators attempted to bypass endpoint detection and response (EDR) by rebooting a compromised system into Safe Mode with Networking. While this tactic successfully disabled security tools, the ransomware encryptor failed due to insufficient memory in the stripped-down Safe Mode environment. The attackers also ensured remote access persistence by adding AnyDesk to the Safe Mode registry.

cloud

Fortune 500 Companies Hit in Azure Data Theft Campaign

A threat actor is claiming the exfiltration of millions of records from McDonald’s, TCS, Vodafone, and other large organizations. The post Fortune 500 Companies Hit in Azure Data Theft Campaign appeared first on SecurityWeek.

security

Windows 11’s strongest security defenses can be bypassed without a screwdriver

Researchers from the University of Birmingham and Durham University have found a way to knock down some of the toughest protections in Windows 11 without physically opening or modifying the target machine. The attack assumes the attacker has already gained privileged access to the system. A chip that never checks who’s asking The attack, named “Download More RAM,” targets a small configuration chi