CERT-In AI Security Guidelines Highlight Need for Cyber Risk Prioritisation
CERT-In’s new guidelines urges organisations to classify AI models into Low, Moderate and High or Critical risk categories. This is essentially what exposure management does. It proactively offers Vulnerability Priority Rating, ranking risks that pose the greatest risk to an organisation by focusing on attack pathways that adversaries can leverage. CERT-In’s guidelines now make an approach like exposure management necessary to manage risks arising out of AI adoption.
Most organisations adopt AI faster than they govern it. A recent study shows 35% of organisations have no policies in place to manage AI and prevent shadow AI. Many also conduct a thorough security review, integrate AI into the business and never look at it again. CERT-In’s new AI Security Auditing Guidelines reiterate that neither is the right approach, especially as AI increasingly becomes an attack vector.
The framework emphasises that organisations should first identify and document every AI system in scope,...
Copyright of this story solely belongs to www.itvoice.in. To see the full text click HERE
