Assessing AI Solutions
Our clients are taking on AI solutions at a very fast pace. As cybersecurity professionals, we need to start looking at assessing these solutions for cyber related risks. We have pulled a lot of information from different authorities with an emphasis on the NIST AI RMF. The goal is to familiarize ourselves with the different types of AI solutions and how to assess those solutions for cyber and operational risks that may affect the CIA of AI solution.
Lets learn how to assess AI solutions
Instructor Intro
I am Ernest Smith and would consider myself an elder statesman in RMF and Security Control Assessing. I have a master's in cybersecurity; bachelor's in information security. I used to have a lot of certs but only choose to keep up CISSP and Project Management Professional (PMP) nowadays (I am very heavy into project management and process improvement). I have been active in the world of RMF for more than 12 years. I am still very active in the world of RMF as well working projects of all kinds for all sectors. I have assessed, on behalf of authorizing officials everything from small aircrafts all the way up to top secret worldwide networks as a lead assessor and member of assessment teams. I actively do ISSO/ISSM work as well. Last, I actively advise, at the agency level, AOs, SCAs, ISSOs, ISSMs, Project Managers, and any other position where RMF clarity and understanding is needed. I have a large network of other SCAs and RMF POCs that will help us all overall. To all of the other elder statesmen and experienced assessors out there, it is our job to put our arms around the up and comers to improve the SCA profession. Everyone please join and create an assessor community where we are all actively sharing and getting better.
Course Information
$399
4 Hour Session
None, handouts given during training
Training Certificate of Completion, 4 hours of training
Course Outline
(All topics from the cyber risk perspective)
• AI high level and strategic guidance (governance)
• Roles and responsibilities
• Different types of AI solutions and how they differ
• Mapping AI risks and requirements to NIST SP 800-53, Rev 5 security controls
• Assessing the selected security controls
• Open discussion