What does NCSC say about securing AI across the life cycle?
Answered
Security must be a core requirement throughout the life cycle, not only in development. NCSC guidelines cover secure design, development, deployment, and operation/maintenance — including threat modelling, supply chain, infrastructure, responsible release, and monitoring.
From the guidance
Primary (how) Guidelines for secure AI system development
Security must be a core requirement, not just in the development phase, but throughout the life cycle of the system.
Section: About the guidelines
Read this in Guidelines for secure AI system development (opens in new tab)
Related questions
- What does the Service Standard say about choosing AI technology? Delivery, assurance and operations
- Who is the Government AI Security Team and when should I contact them?
- Is Secure by Design mandatory for government AI services?
- What does Secure by Design expect for detect and respond?
- Should AI products ship with secure-by-default settings?