Secure AI Onboarding Framework
Author | : Michael Bergman |
Publisher | : Michael Bergman |
Total Pages | : 118 |
Release | : 2024-08-22 |
ISBN-10 | : |
ISBN-13 | : |
Rating | : 4/5 ( Downloads) |
Download or read book Secure AI Onboarding Framework written by Michael Bergman and published by Michael Bergman. This book was released on 2024-08-22 with total page 118 pages. Available in PDF, EPUB and Kindle. Book excerpt: AI Onboarding is the process of fine-tuning generic pre-trained AI models using the transfer learning process and the organisation's proprietary data, such as intellectual property (IP), customer data, and other domain-specific datasets. This fine-tuning transforms a generic AI model into a bespoke business tool that understands organisation-specific terminology, makes decisions in line with internal policies and strategies, and provides insights that are directly relevant to the organisation's goals and challenges. Standing in the way of this powerful transformation is the AI onboarding challenge of protecting the confidentiality, integrity and availability of proprietary data as it is collected, stored, processed and used in fine-tuning. The Secure AI Onboarding Framework is designed to address this challenge by supporting the “Risk Identification” and “Risk treatment” phases of ISO/IEC 27005". It decomposes authoritative resources including the AI Act, OWASP, NIST CSF 2.0, and AI RMF into four critical components, namely Risks, Security Controls, Assessment Questions and Control Implementation Guidance. These components help organisations first, to identify the risks relevant to their AI system and proprietary data, second, define an AI system statement of applicable controls to treat the risks. Thirdly, assess the implementation status of those controls to identify gaps in their readiness to onboard the AI system, and finally, they provide control implementation guidance to facilitate the correct control implementation. Ultimately minimising the security risks related to onboarding AI systems and securely integrating them into their business teams and processes.