cyber-security-resources/ai_research/ai_risk_management

AI Risk Management Frameworks and AI Security Resources

NIST Resources

• NIST Risk Management Framework: used to to improve the ability to incorporate trustworthiness considerations into the design, development, use, and evaluation of AI products, services, and systems.
• Roadmap for the NIST Artificial Intelligence Risk Management Framework
• NIST “Language of Trustworthy AI: An In-Depth Glossary of Terms”
• NIST AI Technical and Policy Documents

Europe

• European AI Act
• AI Strategy in Europe
• European Commission Artificial Intelligence – Questions and Answers

Canada

• Artificial Intelligence and Data Act
• Canadian Guardrails for Generative AI – Code of Practice

ISO

• ISO AI Website
• ISO/IEC 42001:2023 Artificial intelligence Management system
• ISO/IEC 23894:2023 Artificial intelligence Guidance on risk management
• ISO/IEC 23053:2022 Framework for Artificial Intelligence (AI) Systems Using Machine Learning (ML)

Cloud Security Alliance

• CSA's Securing LLM Backed Systems: Essential Authorization Practices

Additional Securing AI Resources

• NSA/DoD - Joint Guidance on Deploying AI Systems Securely
• MITRE ATLAS
• OWASP Top 10 for LLM Applications
• OWASP AI Security and Privacy Guide
• Securing Your AI: A Step-by-Step Guide for CISOs
• Securing Your AI: A Step-by-Step Guide for CISOs PT 2
• CSA Securing LLM Backed Systems

Academia

• MIT AI Risk Database