Cybersecurity
LABUSA cybersecurity insights: threat protection, compliance, and managed security strategies to safeguard government and enterprise systems.
What Is Private Enterprise AI?
Private enterprise AI is an approach to using artificial intelligence in which an organization keeps control of the things that make AI risky: the data that goes into it, the identities allowed to use it, the systems it ...
Secure RAG Architecture
A retrieval system is a search engine that answers in sentences, and that changes its security properties in one specific way: search returns links a user can be denied, while generation returns prose that has already be...
Secure Generative AI for Business
Generative AI arrives in an organization whether or not anyone approves it. By the time the question reaches a security team, the useful version of it is rarely whether to allow it, but how to make the allowed path bette...
Protecting Sensitive Data When Using AI
An AI system is a new set of paths in and out of your information. Most of the work of protecting data around one is not novel: it is knowing which paths exist and putting a control on each. What is novel is that several...
AI Identity and Access Management
The governing principle is one sentence, and almost every failure in this area is a departure from it. An AI system must not become a way around the authorization model an organization already has.
That sounds obvious. ...
Securing Enterprise AI APIs
An AI environment is a set of APIs. The model is reached over one, the retrieval service exposes another, the connectors consume half a dozen more, and anything the system can act on is reached the same way.
Which means...
AI Logging, Monitoring and Auditing
Every argument for logging an AI system is an argument for collecting the most sensitive material in the organization into one searchable place. Both halves of that sentence are true, and a design that takes only the fir...
Securing AI Agents in the Enterprise
An agent is an AI system permitted to act rather than only to answer. It can send the mail, update the record, open the ticket, move the file. Everything else about it is a variation on that one change, and that one chan...
AI Governance Framework for Organizations
A governance framework is a list of the things a program has to cover, so that gaps are visible rather than discovered. This one has fourteen domains. Few organizations start with all of them, and the order they are buil...
AI Risk Assessment
An AI risk assessment answers a narrow question: for this use of this system, what could go wrong, how badly, who would be affected, and what are we going to do about it.
This page is about the method. What the risks act...