AI Chatbot Security Assessment- CYbersecurity
Budget: ₹600 – ₹1,500 INR
You have been provided with the following information about a project that a team within your organisation wants to progress. Please prepare a presentation (20- 25 mins) outlining of the process you would follow in order to assess and improve the security of this project as a whole.
Please focus your attention on the following:
What sort of information will you need to progress your assessment and how would you obtain it?
What are the key aspects of this project that need attention and how can they be addressed?
What methodologies would you apply in assessing the security risks, governance, compliance?
How would you recommend risks and vulnerabilities are addressed by the project?
Scenario
The organisation has recently proposed a new project – a generative AI driven chat bot. The purpose of this project is to enable customers to change the address related to their policies, through an intelligent AI driven support agent.
The following is a basic diagram showing how the proposed multi agent system is to be deployed. The system initiates the orchestrator agent on signal that the user wants to change their address. The orchestrator manages the flow of the interaction, and decides which sub-agents to invoke in order to answer the users query. The database agent generates SQL queries against the customer database, updates addresses and returns the current user address. The Report and Formatter agent summarises the information given to it, formats it into an acceptable output and returns that to the users chat session.
The underlying host infrastructure is an enterprise level setup and you can consider that general security best practice is surrounding this system. The back-end LLM is a frontier model utilized through a third party API call to the provider.
NOTE - i want to create a PPT for this to describe in highly technical use case with showing the best security solution using aws cloud for example..like how you will secure each point .pls see the attached screenshot
Please focus your attention on the following:
What sort of information will you need to progress your assessment and how would you obtain it?
What are the key aspects of this project that need attention and how can they be addressed?
What methodologies would you apply in assessing the security risks, governance, compliance?
How would you recommend risks and vulnerabilities are addressed by the project?
Scenario
The organisation has recently proposed a new project – a generative AI driven chat bot. The purpose of this project is to enable customers to change the address related to their policies, through an intelligent AI driven support agent.
The following is a basic diagram showing how the proposed multi agent system is to be deployed. The system initiates the orchestrator agent on signal that the user wants to change their address. The orchestrator manages the flow of the interaction, and decides which sub-agents to invoke in order to answer the users query. The database agent generates SQL queries against the customer database, updates addresses and returns the current user address. The Report and Formatter agent summarises the information given to it, formats it into an acceptable output and returns that to the users chat session.
The underlying host infrastructure is an enterprise level setup and you can consider that general security best practice is surrounding this system. The back-end LLM is a frontier model utilized through a third party API call to the provider.
NOTE - i want to create a PPT for this to describe in highly technical use case with showing the best security solution using aws cloud for example..like how you will secure each point .pls see the attached screenshot