From the course: ISACA Advanced in AI Security Management (AAISM) Cert Prep

Unlock this course with a free trial

Join today to access over 26,200 courses taught by industry experts.

Aligning AI security with InfoSec

Aligning AI security with InfoSec

From the course: ISACA Advanced in AI Security Management (AAISM) Cert Prep

Start my 1-month free trial Buy for my team

Aligning AI security with InfoSec

“

In this episode, we discuss how the AI security program integrates with the existing enterprise information security program. AI security is not a separate silo. It extends, not replaces, the enterprise security framework. Failure to align creates duplicate governance structures, conflicting controls, and audit gaps. Integration point one, the risk register. The AI security risk register feeds the enterprise risk register. AI specific risks that exceed enterprise risk appetite must be escalated through the enterprise framework. The AI risk register is a subset, not a replacement of the enterprise risk register. On the exam, know that AI risk governance does not operate in isolation from enterprise risk governance. Integration point two, incident response. All incidents are classified using a taxonomy. Incidents that involve personal data also trigger GDPR breach notification obligations. The AI Incident Response Procedure must be integrated with, and not separate from, the Enterprise…

Contents