A bank's security team wants an end-to-end, prescriptive framework covering the protection of its AI systems from design through operation. Which Google-authored framework fits this purpose?
Show answer and explanation
Answer: A
SAIF, Google's Secure AI Framework, is a prescriptive framework that covers security for AI systems across their lifecycle, including data, models, and the surrounding infrastructure. ITIL and COBIT are general IT service and governance frameworks, and the OWASP Top Ten focuses on common web application vulnerabilities rather than AI system protection as a whole.
Why the other options are wrong
- B. ITIL organizes IT service management processes such as incident and change handling. It does not give prescriptive security controls specific to AI systems.
- C. COBIT is a governance and control framework for enterprise IT. It is broad and not a Google-authored, AI-specific security guide.
- D. The OWASP Top Ten lists common web vulnerabilities. It is useful for web apps but does not cover the model, data, and pipeline risks of AI systems end to end.