---
title: "The new AI risk is hidden in the code — Marsanne Studio AI watch"
description: "Shadow AI coding, the unmanaged use of AI tools by developers, creates security risks that the AI-BOM and the AI Act aim to control."
url: "https://marsanne.studio/en/ai-watch/the-new-ai-risk-is-hidden-in-the-c74bf5/"
lang: "en"
---

[Marsanne Studio](https://marsanne.studio/en/)

[← Back to home](https://marsanne.studio/en/ai-watch)

[← The AI watch](https://marsanne.studio/en/ai-watch)

Analysis · 23 September 2026

# The new AI risk is hidden in the code

Original title, in French: “Le nouveau risque de l'IA se cache dans le code”

**Publication**

Journal du Net (France)

**Author**

[Florent Mauzé](https://www.journaldunet.com/account/florent-mauze-177903)

**Published on**

23 September 2026 · read in the page structured data

## Summary

The article analyses shadow AI coding, that is, the use of AI tools by developers outside the processes approved by IT departments. According to the CESIN-OpinionWay Barometer (11th edition), 75% of French CISOs regard shadow AI as a risk, but only 16% of companies using AI have deployed a strategy to manage it. The article presents the AI-BOM, an inventory of AI components inspired by the work of the G7 and ANSSI, as a response to these risks, and highlights the role of the European AI Act and Cyber Resilience Act in strengthening governance, traceability and human oversight of the AI systems used in software development.

Summary based on the full text of the article.

[Read the article on Journal du Net →](https://www.journaldunet.com/intelligence-artificielle/1555275-le-nouveau-risque-de-l-ia-se-cache-dans-le-code/)

## Figures cited

-   75 %
    
    share of French CISOs who regard shadow AI as a risk
    
    CISOs in France, CESIN-OpinionWay Barometer, 11th edition
    
    > « En France, 75 % des RSSI considèrent le shadow AI comme un risque »
    
    Source: Baromètre CESIN-OpinionWay
    
-   16 %
    
    share of companies using AI that have deployed a strategy to manage shadow AI
    
    French companies using AI, CESIN-OpinionWay Barometer, 11th edition
    
    > « seuls 16 % des entreprises ayant recours à l’IA ont déployé une stratégie pour l’encadrer, selon la 11e édition du Baromètre CESIN-OpinionWay »
    
    Source: Baromètre CESIN-OpinionWay
    

## Classification

**Country**

France

**Company size**

All sizes

**Industries**

Software vendors, IT services companies, telecoms · All industries, or industry not specified

**Companies**

Anssi (cited), OpinionWay (study author), CESIN (study author)

**Keywords**

shadow ai, software development, ai governance, ai act, cybersecurity, ai-bom

Entry written by Marsanne Studio from the cited article, with the help of an AI model (claude-sonnet-5). The rights to the article and its illustrations belong to Journal du Net and its author. Entry translated from French by Claude Sonnet 5.5.