Agencies from 18 countries have endorsed new guidelines on AI security which have been developed by the UK’s GCHQ’s National Cyber Security Centre and the US Cybersecurity and Infrastructure Security Agency.
The ‘Guidelines for Secure AI System Development’ were written in cooperation with industry experts and 21 other international agencies and ministries from across the world – including those from all members of the G7 group of nations and from the Global South.
The guidelines will help developers ensure that cyber security is both an essential pre-condition of AI system safety and integral to the development process from the outset and throughout, known as a ‘secure by design’ approach.
The guidelines are broken down into four key areas – secure design, secure development, secure deployment, and secure operation and maintenance – complete with suggested behaviours to help improve security.
The full list of international signatories is:
- Australia – Australian Signals Directorate’s Australian Cyber Security Centre (ACSC)
- Canada – Canadian Centre for Cyber Security (CCCS)
- Chile – Chile’s Government CSIRT
- Czechia – Czechia’s National Cyber and Information Security Agency (NUKIB)
- Estonia – Information System Authority of Estonia (RIA) and National Cyber Security Centre of Estonia (NCSC-EE)
- France – French Cybersecurity Agency (ANSSI)
- Germany – Germany’s Federal Office for Information Security (BSI)
- Israel – Israeli National Cyber Directorate (INCD)
- Italy – Italian National Cybersecurity Agency (ACN)
- Japan – Japan’s National Center of Incident Readiness and Strategy for Cybersecurity (NISC; Japan’s Secretariat of Science, Technology and Innovation Policy, Cabinet Office
- New Zealand – New Zealand National Cyber Security Centre
- Nigeria – Nigeria’s National Information Technology Development Agency (NITDA)
- Norway – Norwegian National Cyber Security Centre (NCSC-NO)
- Poland – Poland’s NASK National Research Institute (NASK)
- Republic of Korea – Republic of Korea National Intelligence Service (NIS)
- Singapore – Cyber Security Agency of Singapore (CSA)
- United Kingdom of Great Britain and Northern Ireland – National Cyber Security Centre (NCSC)
- United States of America – Cybersecurity and Infrastructure Agency (CISA); National Security Agency (NSA; Federal Bureau of Investigations (FBI.)
