Best Practices and Guidelines for ChatGPT and Similar AI Models

Best Practices and Guidelines for ChatGPT and Similar AI Models Applications Development Expand our code review processes and policies to encompass Generative AI tools in order to hold ourselves accountable. • Generative AI systems often produces example code that is not only inefficient, but in some cases completely insecure. • Generative AI does not have the ability to distinguish between "good" and "bad" code. • For the purpose of data loss prevention, it should be stressed that no proprietary source code should ever be entered into a public repository or AI systems. Microsoft Co p ilot Microsoft offers a security focused AI assistant called Copilot. Copilot is the preferred AI assistant for the City of Greensboro. • Unlike other solutions, data sent to Copilot does not leave the secure Microsoft tenant and it is not used to train the AI model. • Copilot 365 is an additional add-on license that can be applied for a fee that is integrated directly into all Office 365 applications such as Word, Excel, and Outlook. • Reminder: All Copilot interactions are archived and may be subject to public information requests. Please be mindful of what data you enter Copilot or any other AI system. Deepfakes Deep fakes are artificially created media (video, audio, or images) that use advanced AI technology to replace a person's likeness with someone else's in a convincingly realistic manner. These sophisticated forgeries leverage AI systems to manipulate or generate visual and audio content that can be nearly indistinguishable from authentic media. Deep fakes pose significant threats to organizations: • Reputational damage - Fabricated videos of individuals making inflammatory statements or engaging in inappropriate behavior can severely damage an organization's reputation, even after being debunked. • Security breaches - Voice-cloning technology can be used in social engineering attacks to trick employees into divulging sensitive information. • Misinformation spread - Deep fakes can undermine trust in authentic communications from an organization. - Organizations may face legal challenges defending against or addressing Legal liability • harm caused by deep fakes impersonating their representatives. • Copilot Chat is being tested in beta and is available for anyone who requests access. This offers chat functionality such as chat with files and the web.