Last week I cleared the GWEB exam, and a lot of people asked me how I prepared. So here is my breakdown of how I studied for it and what worked for me. This is actually the second GIAC exam I cleared using the same approach, the first being the GWAPT (GIAC Web Application Penetration Tester), so I have a fair bit of confidence in the method by now. Note: If you’re short on time, skip to the “What I’d Tell Someone Starting Out” section at the bottom for the quick takeaways.

A look at key security frameworks from OWASP and CSA Artificial Intelligence (AI) agents are transforming the technological landscape by enabling more autonomous and adaptive interactions. This blog post provides a comprehensive overview of Agentic AI, exploring its core components and the unique threats these systems introduce. Drawing on security frameworks from organizations like OWASP and the Cloud Security Alliance (CSA), we’ll discuss essential mitigation strategies and the precautions necessary for their responsible and secure deployment.

Hello and welcome to the world of AI security! Whether you’re a seasoned security expert looking to expand into AI or a newcomer to the field entirely, navigating the wealth of available resources can feel overwhelming. I wanted to share a curated list of materials I’ve collected and found helpful on my learning journey to help you build a solid foundation in AI security, covering everything from foundational knowledge, threats, and vulnerabilities to AI governance frameworks.

Hello everyone! Welcome to the final installment- Part 5- of our multi-part blog series exploring ISO 42001:2023, the Artificial Intelligence Management System (AIMS) standard. In this post, we’ll dive into Annex A Controls, concluding our series. If you haven’t caught up yet, check out the earlier parts here: Part 1 — Introduction and Clause 4, Part 2 — Clause 5 & 6, Part 3 — Clause 7 & 8, and Part 4 —Clause 9 & 10 Annex A of ISO 42001 provides nine control objectives supported by 38 individual controls that organizations may implement to address risks and opportunities associated with their AI systems. While implementation of all controls is not mandatory, they serve as valuable references and provide a structured approach for managing various aspects of the AI lifecycle.

Hello everyone! Welcome back to part 4 of our multi-part blog series exploring ISO 42001:2023, the Artificial Intelligence Management System (AIMS) standard. Today, we’re diving into Clause 9: Performance Evaluation and Clause 10: Improvements. If you haven’t had a chance yet, catch up on the earlier parts here: Part 1 — Introduction and Clause 4, Part 2 — Clause 5 & 6, and Part 3 — Clause 7 & 8.

Hello everyone! Welcome back to part 3 of our multi-part blog series exploring ISO 42001:2023, the Artificial Intelligence Management System (AIMS) standard. Today, we’re diving into Clause 7: Support and Clause 8: Operations. If you haven’t had a chance yet, catch up on the earlier parts here is Part 1 — Introduction and Clause 4, and Part 2 — Clause 5 & 6.

Continuing our multi-part blog series, today we will explore Clauses 5 and 6. Both of these clauses fall under the Plan section of the PDCA cycle. If you haven’t yet checked out Part 1, you can find it here.

In Dec 2023, the International Organization for Standardization (ISO) published ISO 42001, the world’s first international standard specifically designed for artificial intelligence management systems. This landmark standard arrives at a critical juncture as organizations across industries grapple with implementing AI technologies responsibly, ethically, and effectively. Whether your organization is just beginning to explore AI capabilities or already has sophisticated AI systems in production, understanding ISO 42001 has become essential in today’s rapidly evolving technology landscape. ISO 42001 is structured into 10 main clauses, covering areas such as organizational context, leadership, planning, support, operation, performance evaluation, and improvement. In addition to these clauses, the standard includes Annex A, which lists 38 AI-specific controls. In this multipart blog series, we will thoroughly explore each clause and control of ISO 42001. In today’s post, we’ll begin by understanding what ISO 42001 is and take an in-depth look at Clause 4.

So, when is the right time to start prompt testing? And what are the prerequisites before you begin? Let’s dig into that a bit:

Artificial intelligence, especially Generative AI, has begun to have a major impact in our daily lives. Soon, it may become as essential as smartphones and social media have become today Let’s begin with the definition of Generative AI. Generative AI is a subset of AI that uses generative models to produce text, images, videos, etc. Large Language Models (LLMs) are generative AI focused on text-based tasks. Like any emerging technology, generative AI has both advantages and disadvantages. As security professionals, we must anticipate how malicious actors might exploit these technologies and develop strategies to protect individuals and communities from potential threats.