What is continuous assurance under Secure by Design?
Answered
Implement continuous security assurance so risk owners have evidence controls work at delivery and throughout operations, and so controls stay appropriate as the service and threat landscape change. This complements AI assurance techniques for trustworthiness beyond pure cyber security.
From the guidance
Primary (how) Secure by Design Principles
Implement continuous security assurance processes to create confidence in the effectiveness of security controls, both at the point of delivery and throughout the operational life of the service.
Section: 9. Embed continuous assurance
Secondary (normative) Introduction to AI assurance
In the case of AI, assurance measures, evaluates and communicates the trustworthiness of AI systems.
Section: 3.1 The importance of trust
Read this in Introduction to AI assurance (opens in new tab)
Related questions
- How do teams evidence Secure by Design?
- Who should own cyber security risk for an AI service under Secure by Design?
- What is AI assurance? Getting started
- Is Secure by Design mandatory for government AI services? Security and safe use of tools
- How should commercial teams apply Secure by Design when buying AI? Buying and building