Insights Hub

Stay up to date with security news, technology updates and cyber stories that matter.

4 Interesting Cloud Trends

A simple guide for safe AI use in small organisations 

You do not need technical knowledge to use this checklist.
Answer each question honestly. If you answer “No”, that’s your action point. 

u

Do we know where AI is being used?

☐ Do we know which AI tools people are using for work?
☐ Does this include free tools or personal accounts used during work time?
☐ Do we know what people use AI for (emails, reports, analysis, admin tasks)? 

Why this matters?
You can’t manage risk if you don’t know what’s being used. 

If unsure: Ask staff directly and make a simple list. 

u

Do staff know what NOT to put into AI tools?

☐ Do we know which AI tools people are using for work?
☐ Does this include free tools or personal accounts used during work time?
☐ Do we know what people use AI for (emails, reports, analysis, admin tasks)? 

Why this matters?
You can’t manage risk if you don’t know what’s being used. 

If unsure: Ask staff directly and make a simple list. 

u

Are staff checking AI output before using it?

☐ Do we know which AI tools people are using for work?
☐ Does this include free tools or personal accounts used during work time?
☐ Do we know what people use AI for (emails, reports, analysis, admin tasks)? 

Why this matters?
You can’t manage risk if you don’t know what’s being used. 

If unsure: Ask staff directly and make a simple list. 

u

Are we keeping humans in charge?

☐ Do we know which AI tools people are using for work?
☐ Does this include free tools or personal accounts used during work time?
☐ Do we know what people use AI for (emails, reports, analysis, admin tasks)? 

Why this matters?
You can’t manage risk if you don’t know what’s being used. 

If unsure: Ask staff directly and make a simple list. 

u

Do staff know the basic rules?

☐ Do we know which AI tools people are using for work?
☐ Does this include free tools or personal accounts used during work time?
☐ Do we know what people use AI for (emails, reports, analysis, admin tasks)? 

Why this matters?
You can’t manage risk if you don’t know what’s being used. 

If unsure: Ask staff directly and make a simple list. 

Our Accreditations

Our Reviews

Subscribe for Latest Cyber Security News & Tips