Hands-On AI Security Risk Assessment with Jake Williams

With AI being embedded in practically every line of business application, security teams are struggling to keep pace with the rapidly moving landscape of AI.

This course trains students on the skills necessary to understand the foundations of AI from a security perspective, threat model applications using AI, identify appropriate AI use cases for security teams and line of business applications, critically evaluate the risk of each, and build out an AI governance program. Students will learn how to separate realistic risks from hype, learn the security controls available for AI, and how to apply them to their risks.

A core challenge related to AI at many organizations is third party risk management (TPRM). Students will learn the Risk AIssessment™ methodology for rapidly assessing the security of AI applications. Combining their new knowledge of the realistic risks of AI, students can apply the AIssessment™ methodology to rapidly focus their limited resources to evaluating the most important applications.

Students will evaluate applications in hands-on labs, applying a “learning by doing” instruction methodology.

On day two of the course, students will learn the OWASP Top 10 for LLM Applications. Students will learn how to attack and defend against prompt injection with hands-on labs. Students will also target a RAG application and insecure plugins in additional labs.