CYBERSECURITYTRACKER
Permanent story citation

How to mitigate the risk from AI-generated apps built by your 'citizen coder' employees

This page keeps the story as Cybersecurity Tracker first published it. If the tracker later corrects it, the correction appears below the original and never replaces it.

Back to newsStory 9503

As cited

Copy frozen at (site build).

ai security

How to mitigate the risk from AI-generated apps built by your 'citizen coder' employees

Non-technical employees using generative artificial intelligence (AI) tools to build workplace applications, often called citizen coding, can create security vulnerabilities, misconfigurations, and data sprawl if developed without oversight. A five-tier governance framework combining executive strategy, AI governance boards, departmental functional leaders, IT enablement, and community support can allow organizations to permit citizen coding while maintaining security and compliance guardrails. Mandatory security training and peer leadership through department-level AI Functional Leaders help mitigate risks while avoiding counterproductive blanket prohibitions.

Why it matters: Security and IT teams need a governance structure to address shadow AI risks from employee-built applications, as prohibiting citizen coding typically drives development underground and creates unmanaged vulnerabilities in production systems.

VendorsSlack
Source published
First seen by Cybersecurity Tracker

Source attribution

Glossary