When AI Crossed the Air Gap: Shadow AI as an ICS Safety Risk

Industrial environments are not being compromised by deployed AI models, but by uncontrolled AI use by engineers, analysts, and vendors interacting with OT data. This session presents a real world case study where shadow AI introduced new risks to safety, availability, and integrity in an ICS adjacent environment. Attendees will learn how AI bypassed segmentation and existing OT controls through human workflows, why traditional ICS defenses failed to detect it, and how the SANS ICS 5 Critical Controls were applied to restore visibility and reduce risk. The session concludes with concrete steps to identify AI touching OT systems, assess operational impact, and implement controls that improve resilience without disrupting operations.