Cyber Risk Assessment, IT Asset Management and… AI obviously
summary
Claims that AI amplifies risks across confidentiality, integrity and availability and must be treated as an IT asset with its own inventory: model inventory: data, flows, APIs, licenses, third parties. Lists practical frameworks and tools to use: ISO 27005, ISO 31000, NIST RMF, ANSSI methodology and the new AI RMF, plus GRC platforms, asset discovery, vulnerability scanners and even Excel spreadsheets. Notes local LLMs can automate due diligence and log analysis but are vulnerable to data poisoning (a few documents can corrupt models), and cost‑benefit for AI security remains hard to quantify.
AI-written summary · about
chapters (6)
- 0:00Introduction to cyber risk
- 1:50NIS2 directive overview
- 3:42Risk management frameworks
- 8:47IT asset inventory importance
- 10:14AI in cybersecurity risks
- 13:04AI governance and resources
related talks
25mCrash Course on AI Risk Management Framework
44mWhat Security Teams Need to Know and Do
31mAI risk governance
35mRisks and Mitigations for a Safe and Responsible AI
28mAI Under the Hood: Unmasking Hidden Threats
12mUsing Privacy Infrastructure to Kickstart AI Governance: NIST AI Risk Management Case...
15mAI Security Simplified: Turning Complexity into Cohesion
52mThe Risky Business, of AI Illiteracy