---
date: 2023-11-20
description: The emergence of enterprise-level generative AI tools, such as OpenAI's
  custom GPTs and Microsoft's Copilot Studio, enables business users to easily create
  AI applications using organizational data. These tools facilitate user impersonation,
  complicating security oversight, as AI actions become indistinguishable from legitimate
  user activities. Security teams must shift focus from traditional monitoring to
  integrating strategies that account for citizen-developed applications, particularly
  as low-code/no-code platforms proliferate. Adopting industry standards for assessing
  risks associated with these applications will be crucial for maintaining security
  in an evolving landscape dominated by agile AI development.
link: /archive/2023-11-20-enterprise-generative-ai-enters-its-citizen-development-era
tags:
- Generative AI
- No-Code Development
- Cybersecurity
- Citizen Development
- Enterprise Security
- weblog
title: Enterprise Generative AI Enters Its Citizen Development Era
type: weblog
---
{% raw %}

Business users are building Copilots and GPTs with enterprise data. What can security teams do about it?

{% endraw %}