CISA Alerts: April 15, 2024 – CISA, FBI, and Five Eyes Publication on Deploying AI Systems Securely

Securing AI

CISA, FBI, and Five Eyes Issue Joint Guidance on Deploying AI Systems Securely on April 15, 2024

On April 15, 2024, the National Security Agency’s Artificial Intelligence Security Center (NSA AISC) published the joint Cybersecurity Information Sheet Deploying AI Systems Securely in collaboration with CISA, the Federal Bureau of Investigation (FBI), the Australian Signals Directorate’s Australian Cyber Security Centre (ASD ACSC), the Canadian Centre for Cyber Security (CCCS), the New Zealand National Cyber Security Centre (NCSC-NZ), and the United Kingdom’s National Cyber Security Centre (NCSC-UK).

The rapid adoption, deployment, and use of AI capabilities can make them highly valuable targets for malicious cyber actors.

Published Date:  04/15/2024

Summary:

The guidance provides best practices for deploying and operating externally developed artificial intelligence (AI) systems and aims to:

  • Improve the confidentiality, integrity, and availability of AI systems. 
  • Ensure there are appropriate mitigations for known vulnerabilities in AI systems.
  • Provide methodologies and controls to protect, detect, and respond to malicious activity against AI systems and related data and services.

CISA encourages organizations deploying and operating externally developed AI systems to review and apply this guidance as applicable. CISA also encourages organizations to review previously published joint guidance on securing AI systems: Guidelines for secure AI system development and Engaging with Artificial Intelligence. For more CISA information and guidance on securing AI systems, see cisa.gov/ai.

If you want to learn more about how to ensure all AI deployment in your organization is secure, the cybersecurity team Spry Squared is standing by.