Security and safe use of tools

• Can I put official or unpublished information into public tools like ChatGPT?

  4 sources Contrasting

• Can I use Microsoft Copilot, Slack GPT, or similar embedded AI features at work?

  3 sources

• Are AI meeting transcription tools allowed?

  2 sources Contrasting

• Should I use a public AI API, a privately hosted model, or a managed platform?

  2 sources Contrasting

• What are the main security risks of using AI in government?

  1 source

• How do I stop an AI system from leaking personal or sensitive data?

  1 source

• How should I handle prompt injection and other generative AI-specific threats?

  4 sources Contrasting

• What is the difference between prompt injection and jailbreaking?

  2 sources

• Can I trust generative AI outputs, or do they hallucinate?

  3 sources

• What does NCSC say about securing AI across the life cycle?

  1 source

• What is adversarial machine learning and why does it matter?

  1 source

• What is data poisoning in an AI system?

  2 sources

• How should I threat-model an AI system?

  2 sources

• How should I handle importing third-party AI models or weights?

  1 source

• What controls do I need when calling an external AI API?

  1 source

• Which AI assets should I protect, including logs?

  1 source

• Can attackers steal my model or training data through the API?

  1 source

• Should AI products ship with secure-by-default settings?

  1 source

• Is Secure by Design mandatory for government AI services?

  2 sources Contrasting

• What does Secure by Design expect for detect and respond?

  2 sources