Security

Security protects systems and information against unauthorized access, change, disclosure, disruption, or destruction.

Plan for this page

Understand one concept in plain language and connect it to nearby ideas.

You will leave with: For AI systems it includes models, data, prompts, retrieval stores, identities, tools, APIs, infrastructure, supply chains, and outputs. Threats can target confidentiality, integrity, availability, or safe control of action.
Time: 3–8 min
Before you begin: No prerequisite. Keep one real example in mind.
Do this now: Read the explanation, then compare the example with the common misunderstanding.

Prepared next stepConnect security to agent control

SecuritySecurity protects systems and information against unauthorized access, change, disclosure, disruption, or destruction.

Permission
Guardrail
AI incident

Plain explanation

For AI systems it includes models, data, prompts, retrieval stores, identities, tools, APIs, infrastructure, supply chains, and outputs. Threats can target confidentiality, integrity, availability, or safe control of action.

Example

An agent uses narrow credentials, validates tool inputs, separates test from production, logs access, and can revoke a compromised key.

Why it matters

AI can add new interfaces and automate actions while inheriting ordinary software vulnerabilities. Security requires threat modeling, layered controls, updates, monitoring, response, and recovery.

Common misunderstanding

Misconception: content filtering is complete AI security. Correction: filters address limited output risks and do not replace identity, access, code, data, infrastructure, and incident controls.

Related concepts

Follow relationships, not only the alphabet

PermissionA permission is an authorized ability to access information, use a tool, or perform an action under defined conditions.GuardrailA guardrail is a preventive, detective, or corrective control intended to keep system behavior within defined boundaries.AI incidentAn AI incident is an event where an AI system causes, contributes to, or creates a credible risk of harm, failure, or rights impact.

Connect security to agent control

Sources and scope

What supports this object

Artificial Intelligence Risk Management Framework (AI RMF 1.0)U.S. National Institute of Standards and Technology

Places security and resilience within contextual AI risk management; detailed cybersecurity controls require system- and threat-specific standards.

Open source

Loading page content...

…