Protecting AI with enterprise security
The foundations help establish the structures that are needed to manage and mature AI security in the enterprise. However, they need controls and processes to protect AI. These correspond to the Protect function of the NIST CSF and are critical in defining the necessary protective measures to safeguard AI within enterprise systems. They ensure that AI operations are secure, reliable, and resilient against various threats and include the following aspects:
- AI policy development: Establishing policies that govern the use of AI systems within the enterprise. This includes defining acceptable uses, ethical guidelines, and security protocols that align with organizational values and compliance requirements. Organizations can develop these policies by engaging with stakeholders across departments to ensure all potential AI use cases are covered comprehensively.
- Threat modeling: Mandate threat models to guide risk-based defenses will help...
