Security
Operational controls for security, with maturity levels, evidence requirements, and implementation guidance.
Get the free AI Governance Control Tracker
Get the free Excel tracker for all 136 governance controls. Score maturity, assign owners, and set deadlines, including the 7 security controls on this page.
- 136 controls in Excel
- Score maturity and assign owners
- Track deadlines and regulation coverage
Includes AI Governance Weekly every Thursday. Unsubscribe anytime.
7 controls
Prompt Injection Prevention
Detect and block inputs designed to override instructions, extract sensitive information, or cause unintended AI behavior.
AI System Access Controls
Apply authentication, authorization, and role-based access controls to AI systems, their APIs (software connections), and the sensitive data they process.
Sensitive Data Handling in AI Pipelines
Prevent personally identifiable information, credentials, health data, and other sensitive content from entering AI models, prompts, or logs inappropriately.
AI API Credential Management
Securely manage, regularly replace, and audit API keys and credentials used to access AI services and model providers.
Adversarial Robustness Testing
Systematically test AI systems against hostile inputs, unusual cases, and known attack techniques before deployment and on a recurring basis.
Deepfake Impersonation Defense for Approvals and Payments
Require a check through a separate, trusted channel before acting on voice, video, or message requests to move money, change payment details, or grant access. Do not accept a familiar voice or face as proof of identity.
Synthetic Media Victim Abuse-Response and Disclosure Standard
Operate a victim-facing response standard for AI-generated likenesses: a takedown workflow with jurisdiction-specific response timelines, a consent register for voice, image, and video use, and an evidence-preservation and law-enforcement handoff path for intimate-image abuse.