-
Notifications
You must be signed in to change notification settings - Fork 55
Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
Merge pull request #48 from OWASP/charter-and-meetings
Added Project charter and team meetings to media page
- Loading branch information
Showing
3 changed files
with
65 additions
and
0 deletions.
There are no files selected for viewing
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,53 @@ | ||
| --- | ||
| title: 'AI Exchange Charter' | ||
| --- | ||
| ## Purpose | ||
| >Comprehensive guidance and alignment on how to protect AI against security threats - by professionals, for professionals. | ||
| The goal of the OWASP AI Exchange is to protect society from AI security issues by independently harnessing the collective wisdom of global experts across various disciplines. This initiative focuses on advancing AI security understanding, supporting the development of global AI security guidelines, standards and regulations, and simplifying the AI security domain for professionals and organizations. Its goal is to provide a comprehensive overview of AI threats, risks, mitigations, and controls, aligning with global standardization initiatives such as the EU AI Act, ISO/IEC 27090 (AI Security), the OWASP ML Top 10, the OWASP LLM Top 10, and OpenCRE. This alignment, achieved through open source, is crucial to prevent confusion and ignorance, leading to harm from AI security incidents. | ||
|
|
||
| ## Target Audience | ||
| This charter primarily addresses the needs of cybersecurity experts, privacy/regulatory/ legal professionals, AI leaders, developers, and data scientists. It offers accessible guidance and resources to these groups, enabling them to build and maintain secure AI systems effectively. | ||
|
|
||
| ## Mission / Goals | ||
| Our mission is to establish the OWASP AI Exchange as the place to go for professionals who want to understand AI security, and to be the authoritative source for consensus, alignment, and collaboration among various AI initiatives. We aim to foster a unified approach to addressing AI security challenges. | ||
|
|
||
| ## Scope & Responsibilities | ||
| - Develop a comprehensive framework for AI threats, risks, mitigations, and controls. | ||
| - Create a map integrating AI regulatory and privacy regulations. | ||
| - Establish a common taxonomy and glossary for AI security. | ||
| - Provide guidance on testing tools with outcome assessments. | ||
| - Formulate a shared responsibility model for third-party AI model usage. | ||
| - Offer supply chain guidance and an incident response plan. | ||
|
|
||
| ## Relation to other OWASP or other organization initiatives | ||
| These are the other OWASP AI initiatives and the relation with the AI Exchange; | ||
| - The OWASP AI security and privacy guide is the official OWASP project under which the AI Exchange was established. The deliverable of this project consists of the AI Exchange content plus guidance on AI privacy. | ||
| - The OWASP LLM top 10 provides a list of the most important LLM security issues, plus deliverables that focus on LLM security, such as the LLM AI Security & Governance Checklist. | ||
| - The OWASP ML top 10 provides a list of the most important machine learning security issues. | ||
| - OpenCRE.org has been established under the OWASP Integration standards project and holds a catalog of common requirements across various security standards inside and outside of OWASP. The plan is to let OpenCRE contain new AI security controls as well. | ||
|
|
||
| ## Roadmap | ||
| - Purpose and mission defined for OWASP AI Exchange Project Working Group | ||
| - Working group charter to 1.0 | ||
| - Project Plan | ||
| - Working group established | ||
|
|
||
| ## Implementation | ||
| - Create a roadmap, share documents, and establish a meeting cadence. | ||
| - Record meetings and take notes for transparency and accessibility. | ||
| - Communicate developments through newsletters. | ||
|
|
||
| ## Next milestone for content | ||
| - Bring content to 1.0 draft. | ||
| - Address all outstanding tasks in the ‘Contribute’ section. | ||
| - Make sure all topics are sufficiently covered regarding depth and width, including references to relevant work. | ||
| - Ensure clarity of all content. | ||
| - Align content as good as possible, with other initiatives like Mitre Atlas, NIST, the LLM Top 10, ENISA’s work, and the AIAPP International Privacy Group. | ||
| - Review 1.0 draft. | ||
| - Conduct internal reviews. | ||
| - Get public comment from other communities / peer review. | ||
| - Release the final version 1.0, alongside a communication strategy and feedback process. | ||
|
|
||
| ## Copyright | ||
| The AI security community is marked with CC0 1.0 meaning you can use any part freely, without attribution. If possible, it would be nice if the OWASP AI Exchange is credited and/or linked to, for readers to find more information. |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters