Umbrella includes ChatGPT in its application database for discovery purposes and designates it as high-risk because of how easily corporate intellectual property and other sensitive information can be leaked through it. Assessing Chat GPT risk is going to be unique to every organization because it’s largely based on the organization’s risk appetite or policies, and therefore what the ChatGPT users are trying to do with it. Some organizations are more risk-averse than others, so their risk assessment will be different from an organization that is more risk-tolerant.
Besides ChatGPT usage being discoverable with Umbrella, it’s also controllable, and it can be blocked through both Umbrella’s DNS-layer security policy and its secure web gateway policy. On the other hand, being able to ensure safe ChatGPT usage – and, more importantly and specifically, determining for what purposes to allow it – can increase employee productivity without sacrificing data security. Umbrella’s data loss prevention functionality provides this clarity to help thoughtfully mitigate ChatGPT risk.