Key Takeaways

• AI risk in regulated industries requires governance and controls that protect confidentiality, integrity, and availability of AI systems and the underlying infrastructure.

• AI systems need clear ownership, review based on risk, secure limits on data and access, human oversight for important actions, and ongoing monitoring.

• Agentic AI needs tighter safeguards because it may access enterprise data, use business systems, and take action with increasing autonomy.

Introduction

AI is moving from experimentation into the work that regulated organizations rely on every day. For example, healthcare organizations use AI systems to support documentation, communications, coding, and operations. Financial services firms apply it to fraud detection, identity verification, customer service, and internal work. Business services firms are embedding it in client delivery, research, analysis, and knowledge work.

When AI systems handle sensitive information, influence business decisions, or connect to enterprise applications, they create new cybersecurity risks and new challenges for protecting information. In simple terms, the risk increases when AI has access to sensitive data, can shape decisions, or connect to tools used to run the business. Agentic AI means AI that can do more than answer a question. It can retrieve data, use software tools, and start actions across systems with increasing autonomy, sometimes without a person approving each step.

For leaders in regulated industries, the goal is not to stop adoption. It is to understand the risk, decide what level is acceptable, and apply the right safeguards. AI governance is the way an organization decides where AI can be used, who is responsible for it, and what safeguards are required. A practical governance program should answer three basic questions: Is sensitive information protected? Can people trust the output? Will the system be available when it is needed?

AI Changes the Risk Profile

Existing privacy, cybersecurity, and oversight obligations still apply when an organization adopts AI. It does not replace these responsibilities. It changes how they need to be applied. In practice, AI can introduce new ways for sensitive information to be exposed, business information to be changed, or critical operations to be disrupted. The systems that support AI, such as identity tools, data platforms, and connected applications, also need to be governed and secured.

Confidentiality is about keeping sensitive information from being seen or used in the wrong way. It is at risk whenever sensitive information enters prompts, uploaded documents, retrieval systems, or logs. A connected system may retrieve more information than a task requires, and data may be retained in ways teams don't fully understand. Governance should make clear what data is allowed, is restricted, and prohibited, who can access it, and how use will be monitored.

Integrity is about making sure information and outputs are accurate, complete, and trustworthy. It is at risk when an AI system produces inaccurate, incomplete, manipulated, or misleading output. For example, an AI tool might rely on bad source material, misunderstand a prompt, or be manipulated by an attacker. The risk is greater if the system can update records, create communications, or change a workflow.

Availability is about keeping systems and operations working when people need them. AI systems depend on infrastructure, identity services, data sources, integrations, and applications. A cyberattack, outage, or misconfiguration can quickly become an operational problem. For higher-impact uses, organizations need continuity plans, escalation procedures, and practical ways to keep working safely when AI systems are unavailable.

What Governance Must Do

AI governance turns these decisions into consistent business practices. It starts with a simple inventory, or list, of AI systems and use cases. Organizations need to know where AI is being used, what data it touches, what decisions or actions it influences, and who is accountable for each use.

Risk tiering means grouping AI uses by how much impact they could have. An application used for graphic design is not equivalent to an AI system that processes protected health information, produces customer communications, or supports a financial decision. Higher-impact use cases should require documented approval, security and privacy review, defined human oversight, testing before deployment, ongoing monitoring, and reassessment when the system or workflow changes.

Accountability should be explicit. Each AI use should have a named business owner who is responsible for why the system is used and what outcome it is expected to support. Security, privacy, risk, legal, and compliance teams should define the limits for acceptable use. Employees need clear guidance on what they can use AI for, when they should escalate a concern, and what to do when an AI system produces unexpected results. Governance succeeds when it supports informed adoption rather than merely adding policy documents.

Cybersecurity Focus by Industry

Healthcare: AI governance and security must protect sensitive health information while preserving workflows that support care. Controls should limit exposure of protected health information, require review of AI-generated documentation, coding, patient messaging, and other outputs that may affect a record or care journey, and make sure operations can continue safely if an AI-enabled workflow or connected application is disrupted.

Financial services: Organizations must protect customer and transaction information while managing fraud and operational risk. Controls should prevent inappropriate exposure of account, identity, and transaction data, address impersonation, synthetic identity, manipulated inputs, and misleading AI-generated communications, and plan for disruption to fraud review, customer support, identity verification, and other time-sensitive activities.

Business services: Organizations must protect client trust and confidential work product. Controls should prevent client information, intellectual property, and sensitive personal information from entering unapproved AI systems, require review of AI-generated research, analysis, client materials, and changes to business records, and avoid relying on AI for critical client-delivery processes without a tested alternative.

Managing Agentic AI

Agentic AI needs more deliberate governance because it can interact with data and systems, not just generate content. Organizations must define what information an agent can retrieve, what applications it can access, and what actions it can take. They also need to decide which actions require a person’s approval, who can override or stop the agent, and whether the organization can review the records and determine what happened after an incident.

Least-privilege access is essential. This means an agent should receive only the data and permissions it needs to complete a defined task. IBM’s Cost of a Data Breach Report 2026 makes this abundantly clear. The report indicates that 92% of the organizations that experienced an AI-related breach lacked proper AI access controls!

Actions that could significantly affect customers, records, operations, or transactions should require approval before they happen. The organization should log all important inputs, actions, and outcomes. Organizations also need a tested way to disable or isolate an agent when its behavior is unsafe or unexpected.

Bring Confidence to Your AI Adoption

Strong AI risk management combines governance and security throughout the AI lifecycle, from early planning to day-to-day use. Organizations should identify AI uses, classify their risk, define what data each AI system can use and who can access it, test controls before deployment, monitor for failures and misuse, and reassess systems when their purpose, data, permissions, or connected workflows change.

Putting these practices into operation can be difficult, especially when different teams use different methods to evaluate AI risk. A common risk and security assurance approach can help create consistency.

HITRUST AI Risk Management can support this discipline by helping organizations identify and manage risks across the AI lifecycle. It provides a structured way to connect AI use to accountability, safeguards, and risks to confidentiality, integrity, and availability. HITRUST AI Security Assessment and Certification can help AI system providers demonstrate that their security controls have been independently assessed, validated, and certified.

Together, these approaches support a clear objective for regulated organizations: use AI with the confidence that it is governed, secure, accountable, and resilient. That foundation allows leaders to adopt AI systems in ways that support innovation without compromising the information and operations that matter most.

Reach out today to learn how HITRUST can help your organization manage AI risk and strengthen AI security.