[new-research] arXiv:2609.05236 — Governing Bring Your Own AI: A Parameterized Maturity Model

[github-actions]

New arXiv Research Paper

arXiv ID: 2609.05236
Title: Governing Bring Your Own AI: A Parameterized Maturity Model
Authors: Dare Bello, John Hastings
Published: 2026-09-04T15:03:49Z
URL: https://arxiv.org/abs/2609.05236

Abstract (first 300 chars)

Employees are increasingly using personally owned generative AI tools such as ChatGPT, Gemini, and Claude for their daily work. This practice is known as Bring Your Own AI (BYOAI), which is a distinct form of Shadow AI in which employee-authenticated personal accounts are used outside of enterprise …

Suggested OWASP Mapping

DSGAI04, LLM04, LLM02, DSGAI01

Suggested Action

Review this paper against the OWASP GenAI Crosswalk entries and update relevant mapping files if new attack patterns or mitigations are identified.

[emmanuelgjr]

Triage: relevant. Governance maturity model for employee use of personal generative-AI tools (shadow AI).

Next step is a content decision: whether it adds an attack pattern, mitigation or evaluation reference to a mapping file. That is expert work (C4), so this stays open.

Triage of the weekly watcher backlog, 2026-09-14. A label and a reason only: no mapping or incident was changed. Reopen or relabel if this reading is wrong.