An organization is designing an AI-based credit risk assessment system integrating sensitive financial data. Which option BEST supports security-by-design?

The correct answer is B. Applying threat modeling specific to AI components before deployment. Security-by-design means integrating security considerations from the earliest stages of development, not retrofitting them later. Applying threat modeling specific to AI components before deployment (B) identifies attack surfaces, adversarial threats, and data exposure risks…

AI Security Design and Implementation

Question

Options

AIntegrating differential privacy mechanisms into model training
BApplying threat modeling specific to AI components before deployment
CSegmenting AI services across containers
DRestricting access to AI models using IP allow lists

How the community answered

(49 responses)

A
4% (2)
B
84% (41)
C
10% (5)
D
2% (1)

Explanation

Security-by-design means integrating security considerations from the earliest stages of development, not retrofitting them later. Applying threat modeling specific to AI components before deployment (B) identifies attack surfaces, adversarial threats, and data exposure risks unique to AI systems - such as model inversion, data poisoning, and prompt injection - while the architecture can still be changed cheaply. Differential privacy (A), containerization (C), and IP allow lists (D) are valuable controls but are point solutions applied after design decisions are made; they do not represent the foundational security-by-design approach that threat modeling provides.

Topics

#Security-by-Design#Threat Modeling#AI System Security#Secure Development Lifecycle

Community Discussion

No community discussion yet for this question.

Full AAISM Practice