Andrew Pyne
Head of Growth, tmc3
Anthony Lloyd
Principal Cyber Technologist, tmc3
Organisations using AI must protect themselves with good security and governance. These are safeguards that can actually unlock — not block — the technology’s full potential.
“The great benefit of artificial intelligence is that it’s an extraordinarily accessible tool,” says Andrew Pyne, Head of Growth at tmc3, a consultancy providing cybersecurity and data protection services to the public and private sector. “Unfortunately, this is also its greatest risk.”
Which is why organisations must take a proactive approach to AI security and governance, tapping into specialist advice from a trusted partner and implementing solutions and guardrails that offer best-in-class, built-in protection.
Why AI needs responsible deployment
While Pyne doesn’t want companies and institutions to be afraid of AI, he warns that they shouldn’t underestimate the harm it can cause if left unchecked. There is a (misleading) argument that security protocols act as a brake on AI innovation and prevent it from reaching its full social and commercial value. Pyne insists the reverse is true. “It’s like a car with good safety features,” he says. “If you’re wearing a seatbelt, you’re able to drive faster because you’re safer. Security is AI’s seatbelt.”
The fact is that people in your organisation are going to use AI tools. “They probably already are,” notes Pyne. “So, you have three options. You can ignore it. You can try to block your people from using it. However, they’ll just find ways around that — or you can get on board with it and make sure it’s deployed safely.”
Don’t just forbid your people
from using AI tools in a
certain way — explain why.
Revolutionary tech that will change lives and industries
Options one and two aren’t options at all, he admits, because the AI genie is now well and truly out of the bottle. Anthony Lloyd, Principal Cyber Technologist at tmc3, agrees. “Secure AI is going to change lives and industries,” he says. “For example, it’s going to deliver better time management for clinicians and revolutionise patient outcomes in the NHS. In the energy sector, it’s going to fundamentally alter the way we understand consumer usage, which will save billions on the grid upgrade. The pace of change is so exciting. It’s going to solve humanity’s biggest challenges.”
As exciting as this potential is, if your organisation is planning to launch a generative-AI pilot, you should ensure that proactive safety measures are in place, including good cyber hygiene practices. “That can be as simple as staff training,” says Lloyd. “Don’t just forbid your people from using AI tools in a certain way — explain why. In our experience, staff don’t want to cause damage to their organisation but may not understand the consequences of their actions.”
Also, Lloyd warns, if you’re going to integrate AI into your internal applications, you need to test it thoroughly to identify vulnerabilities. “That sounds like an obvious thing to say,” he agrees. “Yet, every month, we hear of application security being compromised. So, it’s vital to actively employ security controls.”
UK businesses will be affected by new EU regulations
There’s another pressing reason why companies should ensure they are using AI in a safe, legal and ethical way. Last year, the European Union Artificial Intelligence Act — the world’s first major regulatory framework for AI — came into force. Its different provisions apply in stages (including some milestone obligations in 2025), but it will be fully applicable by August 2026. Complying with it now offers an early opportunity to win trust and cross-border business. “If you’re a British company wanting to trade with the EU, then the Act will affect you,” stresses Pyne.
Most organisations can’t hope to understand the AI threat landscape on their own, which is why collaboration with a trusted cybersecurity partner is critical. “This technology is continually evolving, making it hard to keep up with the risks it poses,” says Pyne. “So, engage with people who make that job their sole focus.”
