Adapting cybersecurity frameworks to manage frontier AI risks: A defense-in-depth approach

Understand

The complex and evolving threat landscape of frontier AI development requires a multi-layered approach to risk management ("defense-in-depth").

• By reviewing cybersecurity and AI frameworks, we outline three approaches that can help identify gaps in the management of AI-related risks.
• First, a functional approach identifies essential categories of activities ("functions") that a risk management approach should cover, as in the NIST Cybersecurity Framework (CSF) and AI Risk Management Framework (AI RMF).
• Second, a lifecycle approach instead assigns safety and security activities across the model development lifecycle, as in DevSecOps and the OECD AI lifecycle framework.