Security, privacy & AI governance
Who may do what, with which data, under whose accountability?
Treat identity, tenant isolation, data handling and tool authority as system properties. Connect threats and risks to implemented controls and evidence, with domain review where needed.
What you need to understand
- Identity, least privilege, secrets and tenant isolation
- Prompt injection, unsafe output and excessive agency
- Threat modeling, retention, provenance and auditability
- Risk ownership, approval and jurisdiction-specific review
Learn it in context
Course lessons use your existing training access. The practice workbook and curriculum map are free.
Evidence to bring to review
A threat-and-control map, negative authorization cases and an auditable explanation of permitted scope.
Access is revoked between retrieval and execution. Demonstrate the current authority check rather than relying on an old prompt.