AI Security Is a Distinct Discipline
A conventional IT security control set addresses confidentiality, integrity, and availability. AI systems introduce additional risk categories: model manipulation, training data poisoning, adversarial inputs, fairness degradation, and transparency failures.
Domain 1: Explainability
What it assesses: Whether the system can produce understandable justifications for outputs, particularly for decisions affecting individuals.