Everybody says AI makes business easier.

Just type a prompt.
Connect a few apps.
Automate everything.

Even an old accountant like me can become an AI expert overnight. 😂

Until this morning.
I received a WhatsApp message in Chinese from Wah Kiang Loh.

“漏洞連環爆! IT 人今晚不用睡了!”
Translation.
“Security vulnerabilities everywhere. IT people can forget about sleeping tonight!” 😂

Apparently, PHP, Node.js and Go had released important security updates.

Remote Code Execution.
TLS vulnerabilities.
Certificate verification.

Wah!

I immediately forwarded the message to our IT team.
“Please check whether our AI systems are affected.”

When I returned to the office, my IT team had already investigated and sent me a detailed report.

First, the good news.

PHP not installed. ✅
Wah! Safe already?

Not so fast, Boss.
Then came the yellow warning signs. ⚠️

Node.js.
AI workflow components.
Web services.

Several components needed updating.
Some were internet-facing.

I stared at the report.
“I thought AI was supposed to reduce manpower. Why is AI creating more work for my IT team?” 😂

Welcome to my AI journey.

Over the past one year, we have been experimenting with AI in our firm.

During pilot projects, everything looked beautiful.

Suddenly, I need to worry about things nobody mentioned during the AI demonstrations.

Data security.
Software updates.
Access controls.
Backups.
System monitoring.

And most importantly.

Who takes responsibility when something goes wrong?

Remember, I run an accounting firm.
I handle clients’ financial information, tax records, payroll and confidential documents.

One careless mistake can create problems far bigger than the time saved by AI.

A successful AI pilot does not mean AI is ready to scale across the company.

Fortunately, our IT team responded quickly.

They identified the affected components and prioritised the necessary updates.

The report meant more maintenance work.

The irony?
For more than 30 years, I have been asking audit clients whether their internal controls are adequate.

Now, AI is forcing me to ask the same questions about our own systems. 😂

Building AI is exciting.
Maintaining AI is demanding.
Governing AI is the real responsibility.