As developments around the EU AI Act continue, U.S. and U.K. government agencies have released joint guidelines on AI security.
The document was released on November 26, 2023 by the U.S. Department of Homeland Security’s Cybersecurity and Infrastructure Security Agency (CISA), in collaboration with the U.K.’s National Cyber Security Centre.
These guidelines respond to the heightened value of AI as a target and the potential for AI to be weaponized. Targeted at AI system providers, whether developing in-house or integrating external components, the principles underscore a “secure by design” approach, emphasizing security ownership and transparency.
Spanning a comprehensive 20-page document, the guidelines cover the entire AI system life cycle, encompassing design, development, deployment, operation, and maintenance. Key recommendations include raising internal awareness about AI threats during design, securing supply chains during development, and monitoring for behavioral changes indicating compromise during operation and maintenance.
Emphasizing a holistic risk assessment, providers are urged to integrate security seamlessly with functionality and user experience from the outset. Secure supply chains, incident response plans, and easy-to-use secure systems are highlighted during development and deployment phases.
Documentation becomes a cornerstone, with providers required to maintain comprehensive records for models, datasets, and more to enhance accountability. The guidelines advocate for “secure by default” systems. Guidelines emphasize a culture of security, information sharing, and transparency about limitations to mitigate risks for users.
In conclusion, these guidelines seek to establish a robust foundation that promotes secure AI, with providers taking responsibility for downstream users and actively participating in a collaborative culture of security.
Need Help?
If you’re curious how these guidelines could impact you or your company, don’t hesitate to contact BABL AI. One of their audit experts can offer valuable guidance and support.
