Artificial intelligence didn’t wait for an invitation. It’s already inside the tools many Murrieta and Temecula businesses use every day: the email app that drafts replies, the CRM that “suggests” next steps, the help desk that writes answers for customers, and the free chatbot an employee opened in a browser tab to summarize a contract. That speed is exactly why AI security risks deserve a spot on your to-do list this month, whether you run a ten-person office or just manage the family computers at home.
Mike Fitzpatrick of NCX Group compared AI to a teenager who just got a driver’s license: smart, fast and a little reckless. I think that’s a useful way to picture it. AI can do a lot of good for a small business, but if nobody teaches it the rules, it can drive your data somewhere you never intended. Here is my take, from years of fixing computers and cleaning up security messes in the Inland Empire, on where the danger hides and what to do about it.
When we ask owners whether they use AI, most say “not really.” Then we look around and find it in several places:
None of these are bad on their own. The problem is that nobody decided to use them, nobody checked their settings and nobody knows what data they’ve touched. That is the definition of shadow IT, and AI has made it grow faster than ever.
The most common mistake we see is simple: someone pastes a customer list, a patient note, payroll numbers or a client contract into a free AI chatbot to “clean it up.” Depending on the service and its settings, that text may be stored, reviewed or used to train future models. For a medical office, insurance agency or law firm, that can become a privacy and compliance problem very quickly.
AI tools sound sure of themselves even when they’re making things up. We’ve seen made-up legal citations, wrong tax figures and “fixes” for computer problems that would have deleted important files. If an AI answer goes to a customer or changes a system, a human needs to check it first.
Criminals use AI too. Phishing emails no longer have the broken English that used to give them away, and voice cloning can make a phone call sound like your boss, your bank or your grandson. Expect more convincing fake invoices, fake vendor bank-change requests and fake “IT support” calls.
Many AI assistants can see everything the logged-in user can see. If your file sharing is messy, an assistant may happily surface salary spreadsheets or HR files to anyone who asks the right question. AI doesn’t create the permission problem, but it makes it far easier to stumble into.
Big companies talk about “GRC.” For a small business, it comes down to three plain questions:
The same ideas apply at home. Don’t paste bank statements, Social Security numbers or medical details into chatbots. Be careful with “AI” browser extensions and phone apps from unknown developers, which are a popular way to sneak in adware or worse. Talk with kids and older relatives about voice-cloning scams, and agree on a family code word for emergencies. And keep your computers and phones updated, because the oldest security advice still blocks a lot of new attacks.
AI can save a small team hours every week. You don’t need to ban it. You just need to put a few guardrails on it before it causes a problem. If you’d like a hand, A. Computer Doctor helps small businesses and home users across Murrieta, Temecula, Menifee, Wildomar and Lake Elsinore review which AI tools are in use, lock down the settings, tidy up file permissions and put a simple policy in place. Give us a call at 951-595-7758 and we’ll help you put AI to work safely.
Credit: Inspired by the NCX Group podcast episode “AI’s a Game-Changer, Are You Ready for the Catch?,” from Bite Size Security with Mike Fitzpatrick of NCX Group. Listen to more episodes at ncxgroup.com/podcast. The commentary above is our own.
Images: “Artificial-Intelligence” (Pixabay) and “Man at a laptop in an office” by Bench Accounting (Unsplash), both CC0 via Wikimedia Commons.
