CurrentWare pushes visibility-first AI governance as shadow AI spreads

CurrentWare used a live webinar on Nov. 5 to argue that organizations need visibility into employee AI use before they write policy or block tools. The company also unveiled a new AI Usage Insights Dashboard in BrowseReporter to help security teams discover shadow AI, measure adoption and move faster from monitoring to enforcement.

Why it matters: - Employees are already using AI at work, often with unapproved tools, while many organizations still lack a clear view of that activity. - CurrentWare’s message: AI governance fails when companies try to enforce policy before they understand real-world usage. - The stakes are practical. AI access affects data security, employee productivity, compliance and tool spending.

What happened: - CurrentWare Inc. shared findings from its live webinar, “The AI Blind Spot: How to Find Shadow AI, Enforce Policy, and Measure AI Adoption.” - The session focused on a four-phase AI governance model built around discover, evaluate, control and measure. - The webinar featured Product Marketing Manager Julia Czlapinski, Senior Account Executive Nabil Shahid, Customer Success Manager Herman le Roux and Head of Support Mike Noseworthy. - CurrentWare said the webinar was designed to help organizations find shadow AI and understand AI adoption before setting policy.

The details: - Shahid said the question for security teams is no longer whether to adopt AI, but how to do it safely. - Shahid cited figures suggesting about two-thirds of employees use AI at work, while only around one in five organizations has a formal AI policy and about a quarter have real usage visibility. - Shahid argued that organizations often end up with two AI strategies: one written by leadership and another created by employees. - Shahid said AI purchases should be based on observed behavior, not assumptions. - Shahid said broad licensing can waste budget. He noted that deploying 1,000 licenses broadly may produce only 30% to 40% adoption. - Shahid said tailoring tools to departments and roles usually improves return on investment and lowers cost. - The panel said AI risk varies by industry. - Technology and finance teams tend to move quickly and handle large data sets. - Healthcare organizations face caution under HIPAA, yet recent research shows heavy shadow AI exposure. - Legal and public sector organizations face blind spots tied to personal information and department-specific workflows. - Le Roux described three approaches used by CurrentWare clients: monitor first and build policy from findings, set allow and block lists up front, or allow access with monitoring. - Le Roux warned that a blanket “one tool, block everything else” approach ignores different needs across HR, finance and IT. - Le Roux also warned that unrestricted access raises the risk of exposing employee and customer data. - Czlapinski said employees still need to get work done even when policy forbids a tool. - Czlapinski said people who believe a tool helps them work will look for another way to use it, often in places with less visibility. - Czlapinski laid out a four-step governance model: discover tools in use, evaluate value and workflow fit, control tools that fail security or governance requirements, and measure adoption over time. - The panel said AI governance should be treated as an ongoing process, not a one-time decision. - Noseworthy demonstrated AI Insights in BrowseReporter, showing detected AI platforms, adoption by user, authorized and unauthorized tagging, and usage trends. - Noseworthy also showed BrowseControl using URL filtering, AI category blocking with allow lists, desktop application blocking and group-based policies. - Noseworthy said CurrentWare gives organizations visibility and controls, but does not write governance plans for them. - Noseworthy estimated from client calls that roughly one in five organizations even mention AI in policy, often in a document that is signed once and never revisited. - Noseworthy said healthy adoption shows up as steady, repeated use of approved tools across the teams where they are expected. - Shahid said one power user can help replicate a workflow for colleagues. - Le Roux said what people do inside a tool matters as much as time spent using it. - When shadow AI is suspected, Noseworthy said the first step is to get visibility before blocking anything. - Noseworthy said the list of AI tools is usually longer than expected and should drive the policy conversation. - Czlapinski said evidence can include screenshots, website and file activity records, and AccessPatrol data on file transfers and USB devices. - CurrentWare described itself as a user behavior analytics platform focused on AI governance, user activity and data loss prevention.

Between the lines: - The webinar’s central argument is that AI policy without usage data is mostly guesswork. - The company is framing visibility as the prerequisite to enforcement, not a substitute for it. - The emphasis on departmental differences suggests blanket AI rules are likely to fail in mixed-workflow organizations. - CurrentWare is also positioning adoption measurement as a management tool, not just a security feature.

What's next: - The AI Usage Insights Dashboard is available now in BrowseReporter and is enabled by default in the CurrentWare cloud console. - Organizations can start a 14-day free trial or request a demo. - CurrentWare says attendees received an AI governance toolkit with an acceptable use policy template and checklist. - The company also says its AI workplace policy template is available on its website. - Existing customers can contact their Customer Success Manager to review AI usage data. - For more information, see the full webinar insights.

The bottom line: - CurrentWare is betting that the fastest route to effective AI governance starts with seeing shadow AI first, then writing policy around how employees actually work.