Recent AI Case and New Cybersecurity Controls Prescription are a Wakeup Call for Secure AI
From revolutionizing industries to enhancing everyday experiences, Artificial Intelligence (AI) has the potential to reshape our world, and is expected to contribute $15.7 trillion to the global economy by 2030. However, it is critical to recognize the risks associated with AI and the need to mitigate the risks.
Unveiling the Dangers of AI
Forbes published an article highlighting the 15 biggest risks of artificial intelligence with legal, ethical, and societal implications.
CyberCatch published an AI Risk Guide, authored by Founder & CEO, Sai Huda. It is a first in the industry and represents ground-breaking research and thought leadership. While generative artificial intelligence (AI) will transform lives and the business world, it is a two-sided coin. The guide first explains the opportunities, showcasing specific use cases.
Then the guide reveals the five risks inherent in AI that must be mitigated, and provides a step-by-step playbook to manage the risks, and also identifies cybersecurity as the most significant risk and provides a specific playbook to mitigate it.
While Catastrophe Avoided, Recent Case Illustrates the Risks
Recently researchers from Lasso Security detected application protocol interfaces (APIs) security lapses involving exposed API tokens on popular AI development platforms like HuggingFace and GitHub, exposing top-level organization accounts from Google, Meta, Microsoft, and VMWare exposed to threat actors.
Threat actors could inject and corrupt AI models with malware that “could affect millions of users who rely on these foundational models for their applications.”
All concerned parties were alerted promptly, and HuggingFace, Meta, Google, Microsoft, and VMWare took action quickly and revoked or deleted the exposed API tokens, in many cases on the same day as the alert was made.
This case is a wakeup call and illustrates how critical cybersecurity risk is to AI and the need for proper risk mitigation.
This is why the U.S. Cybersecurity and Infrastructure Security Agency (CISA) and the UK National Cyber Security Centre (NCSC), along with partner agencies from 16 nations, have published Guidelines for Secure AI System Development.
It identifies 50 cybersecurity controls in four domains or pillars: secure design, secure development, secure deployment, and secure operation and maintenance.
Any organization developing or using AI needs to minimally implement these 50 cybersecurity controls, plus 5 additional controls prescribed by the Federal Office for Information Security in the German government, to address and mitigate new threats unique to AI, such as poisoning and backdoor attacks.
These 55 controls provide a baseline of necessary cyber risk mitigation to combat the threats posed to an organization’s AI model and system, no matter who the organization is, their size, type or location globally.
This approach not only safeguards the interests of individuals and organizations but also contributes to the responsible and sustainable development of AI in society.
By embracing and implementing the 55 controls, AI providers not only fortify their defenses against cyber threats but also uphold the trust and integrity of their users.
CyberCatch’s Secure AI Compliance Manager is the optimal solution and is most affordable. With CyberCatch, you can attain full compliance quickly and effectively and stay safe continuously.
CyberCatch’s solution comprises of:
- Workflow engine for compliance risk assessment
- All prescribed controls organized by domains
- Compliance tips
- AI-advisor for detailed guidance and to answer any questions
- Policy and procedure templates
- Charts, reports and evidence repository
With CyberCatch, you can quickly complete the compliance assessment accurately and document attainment of compliance and attain cyber safety.
Check out a quick DEMO.
Ready to get started? > Contact Our Team
Learn More > https://cybercatch.com/secure-ai-compliance-manager/
Share This Article
