Uncategorized

ChatGPT: A Game-Changer for Cybersecurity or a New Source of Threats for the Enterprise?

This blog post is the result of an analysis of 35 articles listed here converted to pdfs uploaded to chatbase.co. The application, using OpenAI ChatGPT analyzed the content using the prompts I provided.

What is ChatGPT?

ChatGPT is a language model developed by OpenAI that uses deep learning algorithms to generate human-like responses to text-based prompts. It is trained on a massive dataset of human-generated text, allowing it to understand and respond to a wide range of topics and contexts. ChatGPT has been used in a variety of applications, including customer service chatbots, language translation, and even creative writing.

Why should organizations care about ChatGPT as it relates to cybersecurity?

IT professionals, staff, and company executives should care about ChatGPT and cybersecurity because cyber threats are a growing concern for organizations of all sizes and in all industries. Cyber attacks can result in significant financial losses, damage to reputation, and legal and regulatory penalties. ChatGPT can be used to improve an organization’s cybersecurity posture by providing advanced threat intelligence, incident response, and user training capabilities. However, it is important for IT professionals, staff, and company executives to be aware of the potential risks associated with ChatGPT and take steps to protect themselves from these threats. By staying informed about the latest trends and best practices in cybersecurity, organizations can stay ahead of emerging threats and maintain a strong security posture.

What are the threats to cybersecurity?

The threats associated with ChatGPT include:

  • The potential for ChatGPT to be hacked or manipulated by cybercriminals to provide false information or advice
  • The risk of ChatGPT being used to spread misinformation or propaganda
  • The potential for ChatGPT to be used to automate cyberattacks, such as social engineering attacks or phishing campaigns
  • The risk of ChatGPT being used to bypass security controls, such as firewalls or intrusion detection systems
  • The potential for ChatGPT to be used to steal sensitive information, such as login credentials or financial data
  • The risk of ChatGPT being used to generate convincing deep fake videos or audio recordings, which could be used to spread false information or manipulate individuals or organizations.

ChatGPT can be used to improve a cybersecurity posture in a number of ways, including:

  • Threat intelligence analysis: As explained by The Data Visualization Catalogue Blog, ChatGPT can rapidly analyze large amounts of data from a variety of sources, such as news sites, social media, and other online platforms, to identify potential threats to an organization’s cybersecurity. It can also provide insights into new and emerging threats, which can help organizations proactively protect themselves.
  • Incident response: ChatGPT can be used to automate incident response processes, such as identifying and containing security incidents, providing real-time advice and support to security teams, and generating reports and analysis of cybersecurity threats.
  • User training: ChatGPT can be used to generate custom examples of phishing emails and other types of cyber threats, which can be used to train employees on how to identify and respond to these threats.

The benefits of using ChatGPT to defend cybersecurity include:

  • Improved threat intelligence: ChatGPT can rapidly analyze large amounts of data from a variety of sources, allowing organizations to stay ahead of emerging threats and maintain a strong security posture.
  • Faster incident response: ChatGPT can automate incident response processes, allowing security teams to respond to security incidents more quickly and effectively.
  • Better user training: ChatGPT can generate custom examples of phishing emails and other types of cyber threats, which can be used to train employees on how to identify and respond to these threats.
  • Enhanced situational awareness: ChatGPT can provide real-time advice and support to security teams, allowing them to make more informed decisions and respond to security incidents more effectively.
  • Improved reporting and analysis: ChatGPT can generate reports and analysis of cybersecurity threats, which can be used to identify areas for improvement and develop more effective security strategies.

What can companies do to protect themselves?

To protect themselves from the threats associated with ChatGPT, companies can take a number of steps, including:

  • Implementing strong access controls and authentication mechanisms to prevent unauthorized access to sensitive data and systems
  • Regularly updating and patching software and systems to address known vulnerabilities
  • Implementing network segmentation and other security controls to limit the impact of a potential breach
  • Providing regular cybersecurity training to employees to help them identify and respond to potential threats
  • Monitoring network traffic and system logs for signs of suspicious activity
  • Implementing multi-factor authentication and other security measures to prevent social engineering attacks and other types of cyber threats
  • Conducting regular security assessments and penetration testing to identify vulnerabilities and weaknesses in their security posture
  • Developing and implementing an incident response plan to ensure a rapid and effective response to security incidents
  • Working with third-party security providers to implement advanced security measures and stay up-to-date on the latest threats and trends in cybersecurity
  • Regularly reviewing and updating their security policies and procedures to ensure they are aligned with best practices and industry standards.

Conclusion

ChatGPT has the potential to revolutionize the way organizations defend against cyber threats, providing advanced threat intelligence, incident response, and user training capabilities. However, it is important for organizations to be aware of the potential risks associated with ChatGPT and take steps to protect themselves from these threats. By implementing strong security controls, providing regular training to employees, and working with third-party security providers, organizations can stay ahead of emerging threats and maintain a strong security posture in the face of evolving cyber threats.


ProSci ADKAR: A Framework for Understanding and Managing Organizational Changes

Introduction:

Due to several factors, including changing student demographics and expectations, technological advancements, compliance requirements, and shifts in the job market, higher education is continually transforming. Institutions respond to these drivers by implementing new or existing programs, adopting innovative technologies to enhance learning, teaching, and research, and modifying policies and procedures to meet regulatory requirements. Additionally, some institutions may undergo organizational restructurings, such as mergers or integrations, to achieve economies of scale and address inefficiencies. Implementing these changes can be challenging. This is where organizational change management comes into play. In this blog post, I will introduce a formal process called ProSci Change Management and its vital role in organizational changes.

As a leader/sponsor or recipient of change, it is crucial to understand the reasons behind the change and its potential impact. Before implementing any change, specific questions must be answered and communicated effectively to all stakeholders. These questions include:

  • Why are we changing? This helps to provide context and explain the need for change.
  • Why are we changing now? This helps explain the urgency of the change and why it needs to happen now.
  • What is changing? This helps to clarify what specifically is changing and what areas will be impacted.
  • What is not changing? This helps to reassure stakeholders that some things will remain the same and help to reduce anxiety.
  • What is the risk of not changing? This helps to explain the potential consequences of not making the change.

Think of a time when you’ve experienced change initiatives that met its intended outcomes and when stakeholders “bought in” to the change. How were the questions above defined and communicated?

Personal Experience with Change Management

In my 27-year career, I have led and been involved in major organizational changes, which has given me an understanding of the impact these changes can have on individuals and teams. From my experience, I have observed that when an organization does not consider proper change management, staff can experience negative consequences. Conversely, when the “people side of change” is intentionally considered and actively managed, successful initiatives can lead to ownership and satisfaction among those involved and impacted. Success is defined as achieving intended outcomes and ensuring those involved feel heard and valued. One of the recent and most complex changes I led and was a sponsor of was the integration of two IT organizations that spanned three years.

The Impact of ChatGPT:

Technology integration is often a significant change for organizations, and the adoption of ChatGPT is no exception. As an AI-powered chatbot, ChatGPT has the potential to disrupt traditional communication channels and change the way people work. In higher education, it has the potential to impact teaching, learning, and administrative processes. Implementing ChatGPT requires careful planning and management to ensure a successful transition.

The Importance of Change Management:

Depending on the scope and significance of an organizational change, one or all of these components may affect the organization and the people.

  • Processes
  • Systems
  • Tools
  • Job Roles
  • Critical Behaviors
  • Mindsets/Attitudes/Beliefs
  • Reporting Structure
  • Performance Reviews
  • Compensation
  • Location

This is where change management comes in. Change management is the process of planning and implementing change in a structured and controlled manner to minimize the negative impact on employees, customers, and other stakeholders. It provides a structured approach to managing the people side of change and ensures that everyone affected by the change understands why it’s happening, what’s changing, and how it will impact them.

The ProSci Change Management Process:

Many formal change management frameworks are available, including Lewin’s Change Management Model, Kotter’s 8-Step Change Model Bridges’ Transition Model, and McKinsey 7-S Model. and ProSci ADKAR framework.

I introduced ProSci as the change management process for integrating the two IT units because it resonated with me as it was more specific in addressing changes at the individual level. A principle of ProSci is that organizational change is the result of the collective individual changes.

The ProSci Change Management process consists of three phases:

https://www.prosci.com/resources/articles/prosci-methodology
  • Phase 1: Prepare for Change – Define your change management strategy, prepare your change management team, and develop your sponsorship model.
  • Phase 2: Manage Change – Develop change management plans that include communications, sponsorship, coaching, training, and resistance management.
  • Phase 3: Sustain Outcomes – Review performance, activate sustainment strategies, and transfer ownership.

The Change Success Triangle is a crucial part of the ProSci Change Management process and provides a framework for organizations to manage change successfully.

The Change Success Triangle consists of four components:

https://www.prosci.com/resources/articles/project-change-triangle-overview
  • Success: clarity on the aim or purpose of the initiative
  • Leadership/sponsorship: provides strategy, direction, and guidance
  • Project management: delivers a solution that meets business requirements
  • Change management: enables people to adopt and use the solution

Another essential component of ProSci is ADKAR, which is an acronym for the five key building blocks of successful change:

  1. Awareness: This involves creating awareness of the need for change and its reasons. It’s about helping people understand why the change is necessary and what benefits it will bring.
  2. Desire: This involves creating a desire for the change by helping people understand how it will personally benefit them. It’s about creating buy-in and ownership for the change.
  3. Knowledge: This involves providing the knowledge and skills needed to change. It’s about providing training and support to ensure people are equipped to change.
  4. Ability: This involves creating the ability to change by providing the necessary resources, tools, and support. It’s about removing obstacles and providing ongoing support to ensure people have what they need to change.
  5. Reinforcement: This involves reinforcing the change by celebrating successes and embedding the change into the organization’s culture. It’s about making the change stick and ensuring it becomes part of the new way.

Middle Managers and Change Management:

Middle managers play a critical role in ensuring the change is successful by supporting their teams, communicating effectively, and managing any issues. While change management is essential for all levels of the organization, middle managers often have the most challenging roles. They not only need to go through the change themselves, but they also need to lead their staff in their roles as coaches, liaisons, and conflict managers.

Managers assume these five roles (CLARC) under the ProSci model:

  • Communicator – Share personal impact messages with direct reports about the change
  • Liaison – Engage with and support the project team
  • Advocate – Demonstrate support for the change
  • Resistance Manager – Identify and mitigate resistance to the change
  • Coach – Help employees through the change process

Conclusion:

Effective change management is essential for organizations to remain competitive in today’s rapidly changing business environment. The ProSci Change Management process provides a structured and holistic approach to managing change and ensuring success. Whether integrating new technology like ChatGPT or implementing significant organizational changes, the ProSci Change Management process can help organizations navigate the complexities of change and achieve their goals.

As a leader/sponsor or recipient of change, it is crucial to understand and communicate the reasons behind the change and its potential impact. Organizations can provide context and clarity around the change by answering key questions such as why we are changing, what is changing, and the risk of not changing. By following a structured change management process like ProSci, organizations can minimize the risks associated with change and make the transition as smooth as possible.

Middle managers play a critical role in ensuring the change is successful by supporting their teams, communicating effectively, and managing any issues. Organizations can ensure that they have the skills and confidence to lead their teams through the change by providing them with the tools, training, and support they need.

In conclusion, integrating new technology like ChatGPT can significantly change organizations. However, with the right change management approach and effective communication, training and support, transparency, open feedback, leadership, and celebrating successes, organizations can successfully navigate the complexities of change and emerge stronger and more competitive. By embracing change and taking a structured approach to managing it, organizations can create a culture of innovation and continuous improvement that drives long-term success.


Discovering the Power of Incidental Learning: What I Learned Alongside ChatGPT

I set out to learn ChatGPT, and along the way, my curiosity led me to discover other related topics I did not intend to discover. I asked ChatGPT, “what’s the term called when you accidentally learn something new when learning something else?” There’s a term for that. It’s called incidental learning. Here’s the response: 

As an auto-didact, the last three months have been a fun time for learning.

Here are three topics I am discovering along the way.

  1. I learned how to use Discord. While I had used Discord a couple of years ago, I only really knew how it worked once I got interested in creating images through MidJourney, a text-to-image AI platform that works on Discord. For example, I learned how to use /imagine command to generate a unique image from a short text description (a prompt). I read some examples on Twitter that showed how to use ChatGPT to generate descriptive text, which you can use as a MidJourney prompt. Here’s an example of an image generated by MidJourney. The prompt is “bahay kubo.”

2. I got curious about learning the areas of Artificial Intelligence. What are the disciplines (and their sub-disciplines), and where does ChatGPT belong? I use Airtable to store the information and the relationships between these disciplines. Airtable has an extension called “Flowchart” that enabled me to display the relationships visually, like below. Here’s a more readable version of the diagram below. 

3. I was introduced to Obsidian, a note-taking app that allows users to create, organize, and link their notes using “markdown.” It is designed for knowledge management and personal productivity and offers a range of features to help users connect their ideas and thoughts. Though I have switched to using Airtable to store links to articles related to ChatGPT, Obsidian was where I managed links and my notes associated with Artificial Intelligence.

4. I am learning to analyze conversations around ChatGPT using sentiment analysis and topical modeling. Soon after ChatGPT was introduced in December 2022, I began to track how ChatGPT is discussed on the web and social media by higher education professionals and analysts. I am also compiling higher education institutions’ responses to ChatGPT, which vary from banning the tool, to providing guidance and policies, and presentations around the topic. This is a running list built on Airtable. This journey started with a simple prompt: “How would I analyze the responses around chatGPT? I want to know topics being discussed and sentiments towards ChatGPT.” 

My interest in doing informal research around ChatGPT led me to conversations with faculty members on our campus for their guidance on how to do this research. I intend to share my research finding and maybe even collaborate with scholar(s) more experienced with formal research. One faculty member also expressed the need for IT support on campus as he has chosen to remove the essay and exams from our learning management system and switch to handwritten essays due to ChatGPT.

I am in the starting phase of this learning journey, which started with my curiosity about ChatGPT. I look forward to continuing a deeper understanding of the abovementioned topics and discovering more areas incidentally.

What’s your experience with incidental learning?


How ChatGPT’s Coding Functionality Can Save You Time and Effort: A Demo Using Google Sheets and Apps Script

ChatGPT can provide answers to natural language or summarize given text. One of the benefits I have used as one who needs more time to develop simple code is to use ChatGPT to interpret my prompt and write code. I use Google Sheets quite often, and I use appscript to transfer and manipulate the data. As someone who used to be a software developer but no longer practices it, I don’t have the level of proficiency I used to have, nor the time to develop. I have used ChatGPT to manage my department’s projects and resources. It’s important to note that I did not share any company data to ChatGPT.

Before ChatGPT, it took me days of late-night coding to learn Apps Script and build code that works. Since using ChatGPT, the same code that took me many hours is now possible in seconds. Quite amazing!

The purpose of this blog is to illustrate ChatGPT’s coding functionality. I asked Bing AI to provide me with a list of public APIs I can use, and it listed this site (data.gov). I chose “Demographic Statistics By Zip Code – Demographic Statistics By Zip Code.”

Here is my prompt:

ChatGPT:

ChatGPT also provides some instruction.

To run this code, you will need to follow these steps:

  1. Open the Google Sheet where you want to insert the data.
  2. From the menu, select Tools -> Script editor. This will open the Google Apps Script editor in a new window.
  3. Paste the code into the editor.
  4. Save the script and give it a name.
  5. Run the script by clicking the Run button or by selecting Run -> insertJSONdata from the menu.

The script will fetch the JSON data from the specified URL, parse it, and insert it into the Data worksheet of the specified Google Sheet. The first row will contain the headers, and each subsequent row will contain the data. If there was any previous data on the sheet, it will be cleared before the new data is inserted.

I followed the instructions above and the screenshot below shows the successful execution of the code. I did not have to change the code provided!

No alt text provided for this image

Here is the result:

No alt text provided for this image

One more functionality of ChatGPT is that it provides test cases.

I prompted it with the following: Provide test cases for the code above.

Here is ChatGPT’s response:

To test the code, you can follow these steps:

  1. Open the Google Sheet where you want to insert the data.
  2. From the menu, select Tools -> Script editor. This will open the Google Apps Script editor in a new window.
  3. Paste the code into the editor.
  4. Save the script and give it a name.
  5. Run the script by clicking the Run button or by selecting Run -> insertJSONdata from the menu.

After running the script, you should see the data from the provided JSON source inserted into the Data worksheet of the specified Google Sheet.

Here are some test cases you can use to verify that the code is working correctly:

Test Case 1: Verify that headers are inserted correctly

  • Verify that the first row of the Data worksheet contains the headers of the JSON data source in the correct order.

Test Case 2: Verify that data is inserted correctly

  • Verify that the data from the JSON data source is inserted into the Data worksheet in the correct order.
  • Verify that the data types of the inserted data match the data types of the corresponding columns in the JSON data source.

Test Case 3: Verify that the worksheet is cleared before new data is inserted

  • Insert some data into the Data worksheet manually.
  • Run the script and verify that the previously inserted data is cleared before the new data from the JSON data source is inserted.

Test Case 4: Verify that the script runs without errors

  • Run the script and verify that it runs without throwing any errors.

This blog post is to illustrate one of ChatGPT’s functionality. It fits my use case as someone who needs simple scripts but does not have time nor the interest to spend hours to code. Other alternative AI tools exist for more sophisticated coding, like GitHub Copilot and other alternatives.

How have you used ChatGPT?


The Jobs-To-Be-Done Theory and ChatGPT: How AI Can Serve Stakeholders in Higher Education

credit: Midjourney. Campus and technology

The advent of ChatGPT provides opportunities to examine how to frame the adoption and utilities of these new technologies consistent with the mission and values of an organization. One question to consider is the following:

How does ChatGPT contribute to the stakeholders of an organization and their intended “jobs” or “purpose”? 

Clayton Christensen’s “Jobs To Be Done” theory is a framework for understanding customer behavior and needs. It suggests that people buy products or services to do “jobs” that solve a problem or fulfill a desire. This theory applies to higher education, with Southern New Hampshire University as an example. Southern New Hampshire University (SNHU) grew from 2,500 students to more than 80,000 by applying the jobs-to-be-done theory from Clayton Christensen. SNHU understood why different students attend college and provided better services accordingly. I prompted ChatGPT to provide how the theory applies to the various groups affiliated with an institution:

  1. Job to be done for students: The primary job to be done for students is to obtain a degree or credential that will help them achieve their career goals. However, there are other jobs that students need to accomplish to be successful in their academic journey. For example, students may need to find resources to help them study effectively, get feedback on their work, or build a network of peers and mentors.
  2. Job to be done for faculty: The job to be done for faculty is to provide high-quality education to their students. However, there are other jobs that faculty need to accomplish to be successful in their role. For example, faculty may need to find ways to engage their students, develop new courses or programs, or conduct research that advances their field.
  3. Job to be done for administrators: To be done for administrators is to support the institution’s mission and ensure that it runs efficiently and effectively. However, there are other jobs that administrators need to accomplish to be successful in their roles. For example, administrators may need to find ways to recruit and retain students, manage budgets and resources, or build relationships with community partners.
  4. Job to be done for staff: The team’s primary job is to support the institution’s mission and ensure that it is running smoothly. However, there are other jobs that staff need to accomplish to be successful in their roles. For example, staff may need to provide excellent customer service to students and other stakeholders, manage budgets and resources, or maintain facilities and equipment.
  5. Job to be done for managers: The job to be done for managers is to lead and support their staff in achieving their goals. However, there are other jobs managers need to accomplish to succeed in their roles. For example, managers may need to develop and implement policies and procedures, manage budgets and resources, or build stakeholder relationships.
  6. Job to be done for support staff: The job to be done for support staff is to provide administrative support to other departments or individuals within the institution. However, there are other jobs that support staff need to accomplish to be successful in their roles. For example, support staff may need to manage schedules and appointments, maintain databases and records, or provide technical support.
  7. Job to be done for prospective students: The primary job to be done for prospective students is to find a college or university that meets their academic, career, and personal goals. However, there are other jobs that students need to accomplish to be successful in their college search. For example, students may need to navigate the application process, understand financial aid options, or learn about campus culture and student life.
  8. Job to be done for parents: The job to be done for parents is to support their child in finding a college or university that is a good fit and provides a quality education. However, there are other jobs that parents need to accomplish to be successful in this process. For example, parents may need to understand the financial implications of college attendance, research and visit potential colleges with their child, or provide emotional support and guidance throughout the process.
  9. Job to be done for alums: The primary job to be done for alums is to maintain a connection with their alma mater and to feel a sense of belonging to the institution. This can include staying informed about institutional updates and events, receiving career support and networking opportunities, and giving back to the institution through donations or volunteer work.

So, for each of the groups above and their “jobs to be done,” consider the impacts and consequences (even unintended) of adopting ChatGPT as a tool. For example, the consideration of using ChatGPT for students could be to address “time poverty.” Wladis et al. (Citation 2018) define time poverty as insufficient time to devote to college work (i.e., lack of available time to maintain academic well-being). Students’ time in physical lines to campus offices or virtual queues for their questions to be answered may prevent them from attending classes or studying. Often, marginalized students with financial needs may be the ones who are not only experience financial poverty but time poverty as well.

I recently read an article stating, “don’t automate things that you care about.” Considering the controversy around Vanderbilt University’s use of ChatGPT to write a statement about a tragedy at another school, I agree with the sentiment. However, one could frame the use of automation this way – automate transactional and repeatable processes so staff can spend more time with students who require care. This is a lesson I learned many years ago when I was reminded by an Enrollment Services administrator at my campus that admissions, financial aid, and registrar deal with highly emotional situations. I saw these situations firsthand as I observed students occasionally sobbing after visiting one of these offices. So, if students can be provided self-service via ChatGPT or other chatbots and staff’s time towards transactional and repeatable processes can be reduced to spend more time advising students in need, I think there’s a case to be made about the value of technologies such as ChatGPT.


  • Archives

  • Copyright © 1996-2010 Joe Sabado - Higher Education & Technology Leadership. All rights reserved.
    iDream theme by Templates Next | Powered by WordPress