Week 2 — Secure AI
AI is creating a new attack surface—and traditional security controls cannot address every AI-specific risk.
Oct 7–13
Secure AI
AI is creating a new attack surface—and traditional security controls cannot address every AI-specific risk.
Theme threads
- 1Vulnerability management
- 2EASM
- 3Cloud security
- 4Shadow AI
- 5AI Agents
- 6LLM Security
- 7AI Governance
Pillar scope
Week 2 secures the AI layer—vulnerabilities, external attack surface, cloud, Shadow AI, agents, LLM abuse, and governance tied to technical enforcement.
Leadership focus
Treat AI adoption as a production system with the same SDLC, access, and monitoring rigor as customer-facing apps.
Practitioner guidance
Across Oct 7–13, teams should progress through: Vulnerability management → EASM → Cloud security → Shadow AI → AI Agents → LLM Security → AI Governance. Each day includes a dedicated briefing with risks, actions, and infographics.
Expected outcomes
- 1
AI inventory started
- 2
Shadow AI visibility
- 3
LLM controls prioritized
CISO prompt
Where can an employee exfiltrate data through an unapproved AI tool today?
Daily briefings this week
🔎 Vulnerability Management
CVSS Is Not Enough: Why EPSS + KEV + Asset Context Matter
Oct 8🌐 EASM
You Cannot Protect What You Cannot See
Oct 9☁️ Cloud Security
Cloud Security: Misconfiguration Is Still a Major Risk
Oct 10🧠 Shadow AI
Shadow AI: The Next Generation of Shadow IT
Oct 11🔥 AI Agents
When AI Agents Get More Power: Who Controls the Agent?
Oct 12🧩 LLM Security
Prompt Injection: The Cybersecurity Problem Inside Your AI
Oct 13📊 AI Governance
AI Governance Is Cybersecurity Governance
