A security engineer is designing the deployment architecture for an AI-based threat intelligence platform that will process sensitive customer data. The engineer must ensure the model cannot be accessed by unauthorized internal users or external actors. Which combination of controls best addresses this requirement?

Question

Accepted Answer

A. API authentication with strong credentials plus least-privilege access controls on the model serving endpoint, combined with encryption of data in transit. Protecting an AI model serving sensitive data requires authentication to verify caller identity, least-privilege access controls to restrict which users or services can invoke the model, and TLS encryption to protect data in transit. The SecAI+ objectives under Securing AI Systems explicitly cover protecting AI deployment environments with technical safeguards. A public endpoint increases exposure dramatically. Logging without access controls does not prevent unauthorized access.

Related Questions

Discussion