AI now plays three distinct roles in cybersecurity: the target, the weapon and the defender. Each brings different risks, different controls and different questions about accountability, and the hardest of them is governing the AI we trust to defend us.
Category: Risk Management
Security Management Practices
Cybersecurity In AI and For AI: A Unified Risk Framework from IBM, OWASP, MITRE ATLAS, MIT, and NIST
The Distinction That Changes Everything Most discussions of AI and cybersecurity collapse two fundamentally different questions into one. Separating them is not a matter of semantics — it determines what you defend, how you defend it, and who is responsible. Cybersecurity In AI asks: how do we secure the AI system itself? Cybersecurity For AI… Continue reading Cybersecurity In AI and For AI: A Unified Risk Framework from IBM, OWASP, MITRE ATLAS, MIT, and NIST
Cyber Risks in AI
The risk matrix presented below serves as a structured, multi-dimensional lens through which to assess cybersecurity risks in AI systems. Each of the 67 risks is classified by risk description, threat context, mitigating controls, cyber relevance, control type (preventative or operational). It serves as a threat model and is based on IBM AI Risk Atlas Risk… Continue reading Cyber Risks in AI
AI Cybersecurity Risks & Controls
Cybersecurity risks have become increasingly prominent in AI. Some of them are data poisoning, personal and confidential information in data, prompt injection, lack of data transparency, unreliable source attribution, and unexplainable outputs. These issues can compromise the integrity, security, and reliability of AI systems. Data Poisoning 1. Threat: Data Poisoning in AI Description: Data poisoning… Continue reading AI Cybersecurity Risks & Controls
Cues from OMB Zero Trust Architecture memo
Towards the end of January 2022, the Office of Management and Budget (OMB) released its memorandum on moving government agencies to a zero-trust model. Enterprises that align themselves to industries regulated by the federal agencies can take a cue from it to improve their security posture. The memo considers the recent ransomware attacks on various… Continue reading Cues from OMB Zero Trust Architecture memo