India's nodal cybersecurity agency CERT-In has proposed a new security-audit framework for artificial intelligence systems that could subject major AI companies, including OpenAI and Anthropic, to greater scrutiny over how their models are developed, trained and deployed.
\n\nThe Artificial Intelligence Security Auditing Guidelines come amid growing concerns over cybersecurity risks linked to AI systems and prescribe a risk-based framework under which AI systems would be classified as low, moderate, high or critical risk.
\n\nThe framework places particular emphasis on AI agents, which can independently perform tasks, access tools and interact with other systems.
\n\nUnder the proposed guidelines, AI agents must operate on the principle of least privilege and should not automatically inherit permissions from users, tools or other agents.
\n\nHigh-risk agentic AI systems would also be required to have a “kill switch” mechanism that allows operators to stop the system when necessary.
\n\nThe guidelines also propose greater scrutiny of an AI system's training data and development process, including whether the data is appropriately sourced, whether bias has been accounted for and whether adequate safeguards are in place throughout the model-development lifecycle.
\n\nCritical AI systems face continuous monitoring
\n\nAI systems classified as critical risk would face the most stringent requirements, including…
Original source: https://www.cnbctv18.com/technology/
