Course Outline
Foundations of AI Security Governance
- Fundamental principles of AI governance.
- Enterprise security frameworks applicable to AI.
- Roles and responsibilities of key stakeholders.
Methodologies for AI Risk Assessment
- Identification and classification of AI security risks.
- Threat modeling for AI-enabled systems.
- Impact evaluation and risk prioritization.
Designing Secure AI Systems
- Architecture focused on confidentiality, integrity, and availability.
- Integration of security controls within AI pipelines.
- Considerations for model lifecycle management.
AI Data Protection and Privacy
- Data governance practices for machine learning.
- Handling of sensitive and regulated data.
- Utilization of privacy-enhancing technologies.
Monitoring and Securing AI Operations
- Ongoing evaluation of AI behavior.
- Identification of drift, anomalies, and misuse.
- Operational threat intelligence specific to AI systems.
Regulatory and Compliance Alignment
- International standards affecting AI security.
- Documentation standards and audit readiness.
- Alignment of governance with legal obligations.
Incident Response for AI Systems
- AI-specific attack vectors and indicators of compromise.
- Response protocols for compromised models.
- Post-incident analysis and remediation strategies.
Strategic AI Security Management
- Developing long-term AI security capabilities.
- Incorporating AI risk into broader enterprise strategy.
- Maturity assessments and continuous improvement cycles.
Summary and Future Directions
Requirements
- Comprehensive understanding of cybersecurity risk principles.
- Practical experience with AI or data-driven systems.
- Familiarity with enterprise security governance frameworks.
Intended Audience
- Security managers supervising AI initiatives.
- Professionals in governance and risk management.
- Technical leaders accountable for secure AI adoption.
Testimonials (3)
inventory and identifying the different risk exposures within AI
Gary Cook - Cybersecurity and Information Technology Risk Division
Course - Introduction to AI Trust, Risk, and Security Management (AI TRiSM)
I really enjoyed learning about AI attacks and the tools out there to begin practicing and actively using for security testing. I took a lot of knowledge away which I didn't have at the beginning and the course met what I hoped it would be. My favorite part shown from the training was Comet Browser and was amazed at what it could do. Definitely something will be looking into more. Overall it was a great course and enjoyed learning all OWASP GenAI Top 10.
Patrick Collins - Optum
Course - OWASP GenAI Security
The profesional knolage and the way how he presented it before us