55 terms
Definitions in this topic
- ProductionAgent audit trailAgent audit trails explained: identity, actions, approvals, evidence, and outcomes.
- ProductionAgent authorizationAgent authorization explained: enforcing scoped AI agent permissions for each requested action and resource.
- BusinessAgent governanceAgent governance explained: identity, least privilege, action logging and ownership for autonomous agents, and who is building the frameworks.
- ProductionAgent identityAgent identity explained: proving which AI agent acts, its authority, and its permitted credentials.
- ProductionAgent incident responseAgent incident response explained: detection, containment, evidence, recovery, and ownership.
- ProductionAgent policy engineAgent policy engines explained: deterministic authorization and approval before tool execution.
- BusinessAgent washingAgent washing explained: how inflated agent claims obscure system capabilities, controls, and accountability.
- BusinessAI Act digital omnibusWhat the EU digital omnibus changed in the AI Act: deferred high-risk deadlines and lighter duties for smaller companies.
- BusinessAI agent certificationWhat AI agent certification is, how the first programs like AIUC-1 work with SOC 2, and what a certificate does and does not prove.
- ProductionAI agent securityAI agent security explained: protecting agent inputs, tools, memory, identity, permissions, and execution boundaries.
- LLM foundationsAI alignmentWhat AI alignment is, how labs align models in practice, why reward hacking is the canonical failure, and what it means for buyers.
- BusinessAI assuranceAI assurance explained: evidence and review behind claims about AI system behavior.
- BusinessAI complianceAI compliance explained: turning legal and contractual obligations into controls and evidence.
- Agentic AIAI containmentWhat AI containment means for agents: blast radius, sandboxes, kill switches, and how containment differs from monitoring.
- BusinessAI ethicsWhat AI ethics means in practice: the core principles, how they become enforceable controls, and where ethics meets regulation.
- BusinessAI explainabilityAI explainability explained: why it decides adoption in regulated work, and how it differs from interpretability.
- BusinessAI governanceAI governance explained in plain terms: approval gates, audit trails, and clear ownership for the AI systems your company actually runs.
- BusinessAI inventoryAI inventory explained: a maintained record of AI systems, owners, data, vendors, risks, and controls.
- BusinessAI liability insuranceAI liability insurance explained: what the new coverage includes, and why a general liability policy may now exclude AI.
- ProductionAI red teamingAI red teaming explained: controlled adversarial testing of models, agents, tools, data access, and safety controls.
- BusinessAI risk classificationAI risk classification explained: mapping use cases to controls and legal obligations.
- BusinessAI risk managementAI risk management explained: identifying, treating, monitoring, and owning AI risks.
- BusinessAI safety caseAI safety cases explained: claims, evidence, assumptions, controls, and residual risk.
- BusinessAI securityWhat AI security covers, how it differs from using AI in cybersecurity, and what a mid-sized company should put in place first.
- BusinessAI transparencyAI transparency explained: useful disclosure about AI use, limits, data, and recourse.
- BusinessAI TRiSMAI TRiSM explained: the acronym a buyer meets in analyst decks, and which control layers it actually names.
- BusinessAI usage policyAI usage policy explained: what the document must cover, who owns it, and how it evidences the AI literacy duty.
- BusinessAI vendor assessmentAI vendor assessment explained: reviewing an AI provider's data, security, contracts, limits, and fit for a workflow.
- LLM foundationsAI watermarkingAI watermarking explained: detectable signals, limitations, and provenance alternatives.
- BusinessAuditabilityWhat auditability means for AI systems, the records it requires, and how it differs from explainability, traceability and the audit itself.
- ProductionBlast radiusWhat blast radius means for AI agents: how permissions, credentials and chained tool calls set it, and the controls that shrink it before launch.
- ProductionC2PAC2PA explained: signed Content Credentials for digital media provenance and edits.
- ProductionContent provenanceContent provenance explained: origin, edit history, Content Credentials, verification limits, and business use.
- BusinessData residencyData residency for AI systems: where prompts, records, logs, embeddings, and backups stay.
- BusinessData sovereigntyWhat data sovereignty means for AI buyers: sovereignty vs residency, what the EU and Gulf require, and the questions to put to a vendor.
- BusinessEU AI ActThe EU AI Act explained plainly: the four risk tiers, what providers and deployers each owe, and how to work out where your use case sits.
- BusinessGuardian agentGuardian agent explained: what an agent that watches your agents actually does, and whether it is a real control.
- Agentic AIGuardrailsGuardrails explained: the automated rules that constrain an AI agent, and how they differ from a human approval gate.
- Agentic AIHuman in the loopHuman in the loop explained for business leaders: what an approval gate actually protects, and where to place it.
- BusinessISO 42001ISO 42001 explained: what the AI management system standard requires, and who actually needs to be certified.
- ProductionLeast privilege for AI agentsLeast privilege for AI agents: scoped tools, short-lived credentials, and narrow access.
- ProductionMemory poisoningMemory poisoning explained: how unsafe information persists in AI agent memory and affects later actions.
- BusinessModel risk managementWhat model risk management is, the supervisory framework behind it, and how MRM extends from bank models to AI systems.
- BusinessNIST AI Risk Management FrameworkThe NIST AI RMF explained: the four functions, how it compares to ISO 42001, and when a mid-sized company needs it.
- BusinessNon-human identityNon-human identity explained: what counts as one, why AI agents multiply them, and how to govern the ones nobody owns.
- Agentic AIPrompt injectionPrompt injection explained: direct versus indirect attacks, and the guardrails that actually catch them.
- BusinessResponsible AIResponsible AI explained: turning AI principles into system-specific controls, evidence, accountability, and ongoing risk management.
- LLM foundationsReward hackingWhat reward hacking is, how it relates to specification gaming and Goodhart's law, and why it explains agents that go rogue.
- BusinessRogue AIWhat rogue AI means in practice: malicious, accidental and subverted agents, why CIOs treat them as insider risk, and the controls that contain one.
- BusinessShadow AIShadow AI explained: unreviewed AI use that moves company data outside approved controls and ownership.
- BusinessSovereign AISovereign AI explained: legal, data, infrastructure, and operational control over AI.
- ProductionTool approvalTool approval explained: pausing sensitive AI agent actions for explicit authorization before execution.
- ProductionTool poisoningTool poisoning explained: malicious tool metadata or output that steers an AI agent into unsafe actions.
- BusinessTraceabilityWhat traceability means in AI: the records that connect data, model versions and outputs, and how it differs from auditability and explainability.
- ProductionVoice biometricsVoice biometrics explained: voiceprints, verification scores, enrolment, spoofing risks, and controls for responsible authentication.