Shadow AI The New Supply Chain Disruptor Anant Shrivastava Founder

About Cyfinoid ● Research focused cyber security firm ● Major focus areas as of now ● Software Supply Chain ● Cloud Security https://cyfinoid.com/ © Cyfinoid Research 2

Anant Shrivastava ● Chief researcher @ Cyfinoid Research ● 15+ yrs of corporate exposure ● Speaker / Trainer: BlackHat, Defcon, c0c0n, nullcon & more ● Project Lead: ● ○ Code Vigilant (code review project) ○ Hacking Archives of India (@anantshri on social platforms) https://anantshri.info © Cyfinoid Research 3

World has changed © Cyfinoid Research 4

The flow we all need to know © Cyfinoid Research 5

Shadow’s of all kind © Cyfinoid Research 6

Production © Cyfinoid Research 7

Current way of handling it © Cyfinoid Research 8

Inventory the systems © Cyfinoid Research 9

Operational Loop © Cyfinoid Research 10

Angles to Discover © Cyfinoid Research 11

Shadow AI : Risk Classification © Cyfinoid Research 12

Carrots and Sticks © Cyfinoid Research 13

Incentive Loop © Cyfinoid Research 14

Relook at your role © Cyfinoid Research 15

Thanks for listening & open to Questions? © Cyfinoid Research 16

Trainings & Research Web Application | Cloud | Supply Chain Trainings Attacking Software Supply Chain | Attacking Cloud Environments Contact us at contact@cyfinoid.com (C) Cyfinoid Research © Cyfinoid Research 17