Official websites use .gov
A .gov website belongs to an official government organization in the United States.

Secure .gov websites use HTTPS
A lock ( ) or https:// means you’ve safely connected to the .gov website. Share sensitive information only on official, secure websites.

    Presentations 2026
Presentation

Operationalizing Transparency: Navigating the AI Supply Chain with OWASP AI Exchange and AIBOM

May 19, 2026

Presenters

Aruneesh Salhotra - Open Worldwide Application Security Project (OWASP)

Description

This presentation covered the 5 steps to AI security (which spell GUARD): 

    1. Govern (e.g., have governance structure for inventory, responsibilities, legal, compliance, policy, impact assessment; do you really need AI for the task at hand)
    2. Understand (use AI Exchange)
    3. Adapt your existing practices (to be applicable specifically for AI)
    4. Reduce the impact of manipulated AI (guardrails, minimize/obfuscate sensitive data, limit the impact of unwanted AI behavior
    5. Demonstrate (effectiveness of AI controls, frameworks, measurements)

It was a part of the May 2026 Software and Supply Chain Assurance (SSCA) Forum.

Presented at

May 2026 Software and Supply Chain Assurance (SSCA) Forum

Downloads

Related Topics

Security and Privacy: cybersecurity supply chain risk management, risk management

Technologies: machine learning

Created September 30, 2026