AAISM training guidance specifies that social engineering is the awareness topic most impacted by AI-enabled risks. With generative AI and deepfake technologies, attackers can create highly convincing phishing messages, synthetic voices, or fake executive requests, increasing the sophistication of social engineering attacks. Clean desk policies, insider threat awareness, and authentication procedures remain relevant but are not directly altered by AI advancements. The most likely revision to employee awareness programs in the AI era is therefore enhanced social engineering awareness.
[References:, AAISM Exam Content Outline – AI Risk Management (Human Factors and Awareness), AI Security Management Study Guide – Social Engineering Risks with AI, , , ]
Submit