• Written by Azhar Aliyar, Director

A procurement manager for a large FMCG company is reviewing the purchase order table to identify potential security and privacy risks before deploying AsscherAi, an enterprise AI platform that will answer questions about their organisation's own data in real time, built by Harns Technologies. The manager knows that FMCG's unique characteristics, such as high volume, short shelf life, and promotion-driven demand, will make it harder to settle certain questions in procurement.

FMCG challenges

The promotional distortion in historical sales data makes it difficult to accurately forecast demand, which in turn affects the procurement process. For instance, a shift supervisor checks the maintenance log to ensure that the production line is running smoothly, but the data may not reflect the actual demand due to promotional activities. This distortion can lead to shelf life write-offs, which can be costly for the company.

Distributor visibility is another challenge in FMCG, as it can be difficult to track the movement of goods through the supply chain. This lack of visibility can make it harder to identify potential security and privacy risks, such as unauthorized access to sensitive data. The procurement manager must consider these challenges when reviewing the purchase order table and deploying AsscherAi.

Data processing and storage

When deploying AsscherAi, it is essential to consider where data is processed and stored, and whether it trains anything. The procurement manager must ensure that the data is stored in a secure location, such as a cloud-based server, and that access is restricted to authorized personnel. The manager must also consider whether the data is used to train machine learning models, and if so, whether the training data is properly anonymized.

The category manager compares two suppliers to determine which one can provide the most secure data storage solution. The manager considers factors such as data encryption, access controls, and compliance with relevant regulations. By carefully evaluating these factors, the manager can ensure that the data is properly protected and that the company's security and privacy risks are minimized.

Prompt injection

Prompt injection is a potential data-boundary problem that can occur when using AsscherAi. This happens when an unauthorized user injects a malicious prompt into the system, which can compromise the security and privacy of the data. The procurement manager must ensure that the system has proper controls in place to prevent prompt injection, such as input validation and authentication mechanisms.

For example, a malicious user may try to inject a prompt that reveals sensitive information about the company's supply chain. The system must be able to detect and prevent such prompts from being executed, and the procurement manager must ensure that the system is properly configured to do so. The manager can visit the AsscherAi website to learn more about the system's security features and how to prevent prompt injection.

Least privilege

When deploying AsscherAi, it is essential to ensure that the system has the least privilege necessary to perform its functions. This means that the system should only have access to the data and systems that it needs to answer questions, and no more. The procurement manager must carefully evaluate the system's access controls and ensure that they are properly configured to prevent unauthorized access to sensitive data.

The manager must also consider the potential risks of an assistant that can reach many systems, and ensure that the system is properly segregated from other systems and data. This can be a complex task, and the manager may need to consult with the company's IT department to ensure that the system is properly configured. The manager can contact AsscherAi support for guidance on how to implement least privilege and prevent unauthorized access to sensitive data.

Limitations

While AsscherAi can be a powerful tool for answering questions about an organisation's own data, it is not a substitute for proper security and privacy protocols. The procurement manager must ensure that the company has proper controls in place to protect sensitive data, such as access controls, encryption, and compliance with relevant regulations. AsscherAi is not a security solution, but rather a tool that can help the company make better decisions by providing real-time answers to questions about its own data.

In some cases, AsscherAi may not be the right choice for a company, such as when the company has very sensitive data that requires special handling. In such cases, the company may need to consider alternative solutions that are specifically designed to handle sensitive data. The procurement manager must carefully evaluate the company's needs and consider the potential risks and benefits of using AsscherAi before making a decision.