Analysis ·
The new AI risk is hidden in the code
Original title, in French: “Le nouveau risque de l'IA se cache dans le code”
- Publication
- Journal du Net (France)
- Author
- Florent Mauzé
- Published on
- 23 September 2026 · read in the page structured data
Summary
The article analyses shadow AI coding, that is, the use of AI tools by developers outside the processes approved by IT departments. According to the CESIN-OpinionWay Barometer (11th edition), 75% of French CISOs regard shadow AI as a risk, but only 16% of companies using AI have deployed a strategy to manage it. The article presents the AI-BOM, an inventory of AI components inspired by the work of the G7 and ANSSI, as a response to these risks, and highlights the role of the European AI Act and Cyber Resilience Act in strengthening governance, traceability and human oversight of the AI systems used in software development.
Summary based on the full text of the article.
Read the article on Journal du Net →Figures cited
-
75 %
share of French CISOs who regard shadow AI as a risk
CISOs in France, CESIN-OpinionWay Barometer, 11th edition
« En France, 75 % des RSSI considèrent le shadow AI comme un risque »
Source: Baromètre CESIN-OpinionWay
-
16 %
share of companies using AI that have deployed a strategy to manage shadow AI
French companies using AI, CESIN-OpinionWay Barometer, 11th edition
« seuls 16 % des entreprises ayant recours à l’IA ont déployé une stratégie pour l’encadrer, selon la 11e édition du Baromètre CESIN-OpinionWay »
Source: Baromètre CESIN-OpinionWay
Classification
- Country
- France
- Company size
- All sizes
- Industries
- Software vendors, IT services companies, telecoms · All industries, or industry not specified
- Companies
- Anssi (cited), OpinionWay (study author), CESIN (study author)
- Keywords
- shadow ai, software development, ai governance, ai act, cybersecurity, ai-bom
Entry written by Marsanne Studio from the cited article, with the help of an AI model (claude-sonnet-5). The rights to the article and its illustrations belong to Journal du Net and its author. Entry translated from French by Claude Sonnet 5.5.