How should commercial teams apply Secure by Design when buying AI?

Answered

Make Secure by Design a core consideration across the procurement life cycle — requirements, supplier evaluation, contract management and delivery. Use Cabinet Office modular security schedules with Secure by Design requirements where applicable, and require suppliers to complete the evaluation table when you need them to meet the principles. Involve commercial colleagues early on AI projects.

From the guidance

Primary (how) Implementing Secure by Design

Secure by Design should be a core consideration throughout the procurement life cycle, from defining requirements and evaluating suppliers to contract management and service delivery.

Section: Guidance for commercial teams

Read this in Implementing Secure by Design (opens in new tab)

Secondary (normative) AI Playbook for the UK Government

AI is a rapidly developing market, and you should get specific advice from commercial colleagues on the implications for your project. Reach out to them early in your journey to understand how to use AI in line with commercial requirements.

Section: Principle 8: You work with commercial colleagues from the start

Read this in AI Playbook for the UK Government (opens in new tab)

Related questions