实现安全使用生成式 AI 的实用步骤.pdf

1、Practical Steps to Enable the Safe Use of Generative AIConor McCaffrey Go to Market Lead,SecuritiGraham Thomas Privacy Director,KPMGCIPP/EWELCOME AND INTRODUCTIONSEnabling Safe Use of GenAIAI GovernanceSecuriti AIGEN AIS ANNUAL POTENTIAL IMPACT ACROSSINDUSTRIES$2.6-$4.4 trillionSource:McKinsey&Compa

2、nyBy 2026,AI models from organizations that operationalize AI transparency,trust and security will achieve a 50%improvement in terms of adoption,business goals and user acceptance.Source:Gartner:Innovation Guide for Generative AI in Trust,Risk and Security ManagementGartner Poll:Which Risks of GenAI

3、 Are You Most Worried About?Are AI Models compliant with global regulations?Which AI Models exist?Agents&Assistants CodeNew Category of AppsInsights&AutomationsWhat Controls are there on prompts,agents,assistants?What data is beingused in AI Models?What is the Risk Rating of AI Models?Which security

4、 controls are enabled for AI Models?Discover AI ModelsFROM FEAR TO CONTROL:5-STEP APPROACH TO AI GOVERNANCEAssess AI Model RisksMap Data+AI FlowsImplement Data+AI ControlsComply with ConfidenceDiscover AI ModelsDiscover and catalog AI models in use across public clouds,SaaS applications,and private

5、environments.STEP 1Assess AI Models RisksEvaluate risks related to data and AI models from IaaS and SaaS,and classify AI models as per global regulatory requirements.STEP 2Map Data+AI FlowsConnect models to data sources,data processing paths,vendors,potential risks,compliance obligations,and continu

6、ously monitor data flow.STEP 3Implement Data+AI ControlsEstablish data controls on model inputs and outputs,securing AI systems from unauthorized access or manipulation.STEP 4Comply with ConfidenceConduct assessments to comply with standards such as NIST AI RMF and generate AI ROPA reports and AI sy