The Cybersecurity Infrastructure Security Agency is taking new steps to protect against cyber threats by closely monitoring the development of artificial intelligence software. In a series of alerts, they are pushing for transparency in the software industry and urging specific actions to improve customer security outcomes.
CISA’s latest campaign comes after voluntary global guidelines were released for secure AI system development.
WHY IT MATTERS
The first Secure by Design alert, released on November 29, focuses on web management interface vulnerabilities. Software manufacturers are being asked to publish a secure-by-design roadmap to protect their customers from cyber attacks.
According to the agency, software makers should adopt the principles set forth in Shifting the Balance of Cybersecurity Risk and demonstrate that they are committed to keeping customers secure.
Eager to highlight areas that need urgent attention, CISA aims to identify patterns in software design and configuration that frequently lead to customer organizations being compromised.
For the healthcare industry, third-party software vulnerabilities can have disastrous effects on individual health systems and the industry as a whole. Ransomware attacks have disrupted healthcare delivery, prompting the need for a security-focused culture across healthcare organizations.
When it comes to AI, CISA and its partner agencies want to work further upstream, identifying recurring classes of defects and making systemic changes to eliminate vulnerabilities.
Global cybersecurity agencies are urging developers of AI systems to make informed cybersecurity decisions at every stage of the development process, emphasizing the importance of cybersecurity in building safe, secure, and trustworthy AI systems.

