logo

AI Safety Initiative

Industry leaders converge to provide authoritative research, tools, education and certification for AI safety and security.

Exploring

AI Safety Initiative

In an era where artificial intelligence (AI) rapidly reshapes technology and security, CSA launches the AI Safety Initiative, a pioneering effort dedicated to establishing and disseminating trusted security best practices for AI. With an initial focus on Generative AI, our mission is to empower organizations of all sizes with the guidelines, templates, and knowledge they need to deploy AI solutions that are safe, responsible, and compliant. Our objectives include:

1. Creating trusted best practices for AI and make them freely available
2. Providing customers of all sizes confidence to accelerate responsible adoption due to the presence of guidelines for usage that mitigate risks
3. Complementing AI assurance programs within governments with a healthy degree of industry self-regulation
4. Addressing critical ethical issues and impact to society resulting from significant advances in AI over the next several years

Learn more

Blog
Publications
Video Resources

Blog

AI Safety Initiative

Industry leaders converge to provide authoritative research, tools, education and certification for AI safety and security.

Read More

AI Technology and Risk

Explore the latest AI tech, predict risks, and ensure innovation meets security in the realm of AI.

Read More

Publications

Zero Trust Guidance for Small and Medium Size Businesses (SMBs)

This publication provides guidance for small and medium-sized businesses (SMBs) transitioning to a Zero Trust architecture
Request Download

DoD Zero Trust Strategy

This Zero Trust strategy, the first of its kind for the Department, provides the necessary guidance for advancing Zero Trust concept development; gap analysis, requirements development, implementation, execution decision-making, and ultimately procurement and deployment of required ZT capabilities and activities which will have meaningful and measurable cybersecurity impacts upon adversaries. Importantly, this document serves only as a strategy, not a solution architecture. Zero Trust Solution Architectures can and should be designed and guided by the details found within this document.
Request Download

Department of Defense (DoD) Zero Trust Reference Architecture

The DoD Cybersecurity Reference Architecture (CS RA) documents the Department’s approach to cybersecurity and is being updated to become data centric and infuse ZT principles. ZT supports the 2018 DoD Cyber Strategy, the 2019 DoD Digital Modernization Strategy, the 2021 Executive Order on Improving the Nation’s Cybersecurity, and the DoD Chief Information Officer’s (CIO) vision for creating “a more secure, coordinated, seamless, transparent, and costeffective architecture that transforms data into actionable information and ensures dependable mission execution in the face of a persistent cyber threat.” 2 ZT should be used to re-prioritize and integrate existing DoD capabilities and resources, while maintaining availability and minimizing temporal delays in authentication mechanisms, to address the DoD CIO’s vision
Request Download

NSTAC Report

In May 2021, in the aftermath of a series of significant cybersecurity incidents, the White House tasked the President’s National Security Telecommunications Advisory Committee (NSTAC) with conducting a multi-phase study on “Enhancing Internet Resilience in 2021 and Beyond.” The tasking directed NSTAC to focus on three key
Request Download

Zero Trust Architecture

This publication has been developed by NIST in accordance with its statutory responsibilities under the Federal Information Security Modernization Act (FISMA) of 2014, 44 U.S.C. § 3551 et seq., Public Law (P.L.) 113-283. NIST is responsible for developing information security standards and guidelines, including minimum requirements for federal information systems, but such standards and guidelines shall not apply to national security systems without the express approval of appropriate federal officials exercising policy authority over such systems. This guideline is consistent with the requirements of the Office of Management and Budget (OMB) Circular A-130.
Request Download

Zero Trust Maturity Model

Zero trust provides a collection of concepts and ideas designed to minimize uncertainty in enforcing accurate, least privilege per-request access decisions in information systems and services in the face of a network viewed as compromised. The goal is to prevent unauthorized access to data and services and make access control enforcement as granular as possible. Zero trust presents a shift from a location-centric model to a more data-centric approach for fine-grained security controls between users, systems, data and assets that change over time; for these reasons. This provides the visibility needed to support the development, implementation, enforcement, and evolution of security policies. More fundamentally, zero trust may require a change in an organization’s philosophy and culture around cybersecurity.
Request Download

NSA: Embracing a Zero Trust Security Model

As cybersecurity professionals defend increasingly dispersed and complex enterprise networks from sophisticated cyber threats, embracing a Zero Trust security model and the mindset necessary to deploy and operate a system engineered according to Zero Trust principles can better position them to secure sensitive data, systems, and services.
Request Download

Video Resources

Fortifying your Cloud Risk Governance Series: Defining Cloud Strategy

Published on
August 17, 2024

Fortifying your Cloud Risk Governance Series: Establishing Rock Solid Governance

Published on
August 17, 2024

Cyber Risk Management across the entire Supply Chain

Published on
August 17, 2024