Skip to main content
Implement or document guardrails to prevent AI-enabled misuse for cyber attacks and exploitation

Control activities

Typical evidence

Should include?

Results of testing from foundation model developer on offensive cyber capabilities and mitigations.

F001.1 Documentation: Foundation model cyber capabilities

Provider model cards, cybersecurity assessment reports from model developers, or foundation model documentation describing offensive cyber capabilities and mitigations

Typical location
Vendor Contracts
Capabilities
Text-generationAutomationVoice-generationCode-generation
May include?

Implementing malicious use detection and blocking. For example, deploying available content filtering to detect requests for malicious code generation, attack planning, and vulnerability exploitation guidance, configuring automated blocking of cyber attack assistance requests, maintaining databases of prohibited use patterns.

F001.2 Config: Cyber use detection

Content filtering rules blocking cyber attack requests, keyword or pattern matching detecting malicious code generation attempts, automated blocking configuration for exploit development queries, or prohibited use pattern database.

Typical location
Engineering Code
Capabilities
Text-generationAutomationVoice-generationCode-generation

Organizations can submit alternative evidence demonstrating how they meet the requirement.