BroadBand Security, Inc. (BBSec) has begun offering AI Security Consulting, a comprehensive service designed to help companies operate AI safely. The service provides end-to-end support, from visualising usage to establishing AI governance, assessing and addressing risks, and managing ongoing operations. It also includes identifying risks associated with AI use and conducting vulnerability assessments.
As the use of generative AI in business by companies and organisations expands, BBSec identified inadequate management of actual AI usage and information handling as challenges and launched AI Security Consulting. The service starts with visualising AI usage and risks and provides end-to-end support ranging from governance development to operational management.
Specifically, BBSec reviews the purpose of use, input information, user departments and management systems for AI services and systems used internally, thereby assessing actual usage, including shadow AI. It identifies risks and management issues and prioritises measures. Support also covers the development of policies and rules, internal control assessments and vulnerability assessments.
Risks associated with AI use are assessed from a technical perspective as well, including vulnerability assessments of AI systems and related systems. Risks associated with different forms of use, including RAG (retrieval-augmented generation), AI agents and external AI services, are also assessed. In addition, support for establishing an AI management system and obtaining certification based on ISO/IEC 42001 forms part of the initiative.
The organisation has 9 employees who hold the AAIA, an AI auditing certification awarded by ISACA, an international IT governance organisation. It has established a support structure that draws on expertise in AI governance, risk management and auditing.