ACSC and L.E.K. Consulting are developing an AI vendor assessment toolkit to help organizations move beyond point-in-time reviews and make faster, clearer, leadership-ready risk decisions. These select slides preview the project’s framing .

One of my takeaways from the recent ACSC Workshop at MSFT NERD on May 13th, (thanks to Mark and Marc's incredible presentation) is that we are at a structural inflection point across the entire cybersecurity industry, as AI (Mythos-class) technology is quickly reshaping the economics for both attacking and defending. In preparation for the "Operationalizing Agentic AI in Cyber Security" session on June 18th, where Prophet Security's Co-Founder, Grant Oviatt, will detail Proph

As enterprise AI adoption accelerates, organizations need practical controls that improve visibility, accountability, and containment. This guide outlines five leading AI risk use cases and controls shared by Vishal Thakkar, Chief Risk Officer at Options Clearing Corporation.

AI is changing the speed and scale of cyber risk, shrinking the time defenders have to identify, prioritize, and respond. This ACSC Executive Practice Guide highlights why leaders need a new approach to measuring LLM risk, strengthening fundamentals, and using AI to close the gap between discovery and containment. Credit to ACSC AI Cochairs Mark Maybury and Marc Zissman as well as Aanad Oswal from Palo Alto.

Run your numbers. The ACSC AI Co-Chairs’ risk scoring formula helps you evaluate model risk on a zero-to-one scale. Includes: jailbreak rates hallucination rates poisoning resilience attack frequency availability indicators All public data. Additional material from the calculations shared on Dr. Maybury's GitHub repository. https://github.com/mtmaybury/AI-Risk-Assessment

The ACSC continues to develop and refine the attached toolkit with member input. This document is meant to help you think about how your traditional 3rd party assessment processes may need to be updated to address novel or complex AI risks.

Working with AI Security and Risk experts from MIT Lincoln Laboratory , the ACSC developed this AI Security Automation Framework with feedback from its membership and other industry thought-leaders. This document is meant to help members work through the maturity of AI security and how much is being entrusted to automation.

ACSC's AI Co-Chairs Mark Maybury, Lockheed Martin and Marc Zissman, MIT Lincoln Laboratory presented an overview of how one might apply the five functions of the NIST Cyber Security Framework to AI capabilities at the Annual Member Conference. Their presentation framed the future of AI security and risks.

ACSC's AI Co-Chairs Mark Maybury, Lockheed Martin and Marc Zissman, MIT Lincoln Laboratory presented the following AI definitions at the Annual Member Conference to align all participants with a common lexicon for the day's discussions. Their presentation which framed the future of AI security and risks.

ACSC's AI Co-Chairs Mark Maybury, Lockheed Martin and Marc Zissman, MIT Lincoln Laboratory presented the following description of the threats to Generative AI aligned to the CIA - Confidentiality, Integrity and Availability - framework during their presentation which framed the future of AI security and risks.