Official guide published by INCIBE-CERT with strategic recommendations for mitigating risks arising from the use of advanced Artificial Intelligence (state-of-the-art models and LLMs). The document addresses two key approaches:
- Defense against AI-assisted threats: Measures against hyper-personalized phishing, advanced brute-force attacks, and reducing the time-to-exploit of vulnerabilities. It includes strategies for multi-factor authentication (MFA), Zero Trust architecture, and network segmentation.
- Secure use and governance of AI: Guidelines for auditing code assistants (copilots), protecting sensitive data, and mitigating risks such as prompt injection.
An essential resource for aligning organizations’ operational resilience with international frameworks and current regulations, such as the EU AI Act.