Official websites use .gov
A .gov website belongs to an official government organization in the United States.

Secure .gov websites use HTTPS
A lock ( ) or https:// means you’ve safely connected to the .gov website. Share sensitive information only on official, secure websites.

Presentation

Operationalizing Transparency: Navigating the AI Supply Chain with OWASP AI Exchange and AIBOM

May 19, 2026

Aruneesh Salhotra - Open Worldwide Application Security Project (OWASP)

This presentation covered the 5 steps to AI security (which spell GUARD):

Govern (e.g., have governance structure for inventory, responsibilities, legal, compliance, policy, impact assessment; do you really need AI for the task at hand)
Understand (use AI Exchange)
Adapt your existing practices (to be applicable specifically for AI)
Reduce the impact of manipulated AI (guardrails, minimize/obfuscate sensitive data, limit the impact of unwanted AI behavior
Demonstrate (effectiveness of AI controls, frameworks, measurements)

Navigating the AI Supply Chain (PDF)

Parent Project

See: Cybersecurity Supply Chain Risk Management

Operationalizing Transparency: Navigating the AI Supply Chain with OWASP AI Exchange and AIBOM

Presenters

Description

Downloads

Parent Project

Related Topics