Cyber & IT Supervisory Forum - Additional Resources

A multilayer framework for good cybersecurity practices for AI June 2023

TABLE OF CONTENTS

1. INTRODUCTION

4

1.1. AIMS AND OBJECTIVES

4

1.2. BENEFITS AND BENEFICIARIES

4

1.3. METHODOLOGY

5

2. FRAMEWORK FOR GOOD CYBERSECURITY PRACTICES FOR AI 6

2.1. LAYER I – CYBERSECURITY FOUNDATIONS

7

2.2. LAYER II – AI FUNDAMENTALS AND CYBERSECURITY

13

2.3. LAYER III – SECTOR-SPECIFIC CYBERSECURITY GOOD PRACTICES

23

3. SURVEY ANALYSIS

27

3.1. METHODOLOGY

27

3.2. SURVEY ANALYSIS

28

3.3. SURVEY CONCLUSIONS

34

4. CONCLUSIONS AND THE WAY FORWARD

36

ANNEX I: QUESTIONNAIRE

38

ANNEX II: AI-RELATED STANDARDS

42

A.1 AI SECURITY-RELATED STANDARDS

42

A.2 DESIGN-RELATED STANDARDS

42

ANNEX III: LIST OF ABBREVIATIONS

44

2