You built a real security program. Patch cycles that run on schedule. Zero trust that took two years to implement correctly. Incident response playbooks tested under pressure. Then, somewhere in the last eighteen months, AI agents, MCP servers, embedded vendor features, and autonomous tools walked into your environment faster than your operating model could absorb them. That is not a failure of effort. It is a failure of speed.

Now a question is forming. It comes from a regulator, an audit committee, an insurer, or an enterprise customer expanding its security questionnaire. It always means the same thing: can you prove your AI exposure is known, controlled, and governed? Evidence, documented, dated, scored, and defensible, is something else entirely. This book closes that gap.

THE GREEN DASHBOARD FALLACY

None of your dashboards are lying. The problem is structural: they were all designed before AI agents entered your environment at scale. The fallacy is not a detection failure. It is an assumption failure. The greatest AI security risk facing your organization is not that you are undefended. It is that leadership believes the existing program is already watching.

WHAT YOU PRODUCE

Six artifacts built to survive a regulator, an insurer, an auditor, an enterprise customer, or your own audit committee:

An AI exposure map across the six CISO domains
A non-human identity inventory and agent boundary matrix
A tested AI Red Button procedure
An AI vendor tier map and data flow map
A regulatory crosswalk maintained as a document instead of a fire drill
A four-page board pack assembled from work you have already done

These are not concepts to understand. They are documents to hand over.

THE METHOD

Three instruments carry the audit. The Visibility Triangle sorts every gap into visible, suspected, or undetectable, and the zone determines the response. The Six-Domain Operating View structures the work across governance, security operations, architecture, application security, third-party risk, and data protection. The Defensible AI Security Baseline sets a dated, scored standard across seven areas with a named owner for each, which turns a one-time audit into a program.

Seven binding frameworks run underneath: NIST AI RMF, ISO/IEC 42001, the OWASP LLM and Agentic Top 10, OWASP AIVSS, MITRE ATLAS, HITRUST AI, and Google SAIF. They are cited only where they actually bind, never as a compliance tour.

The engineering thesis is stated plainly. AI agents must be audited as privileged, non-human actors inside your control environment. Once an agent can retrieve data, invoke tools, write records, or trigger workflows, it is an operational actor with an identity, a privilege scope, and a blast radius. Your access review was built for human identities with enumerable behavior. It was not built for this.

Every domain chapter closes the same way: the Board Question your leadership must answer, the Evidence Required to answer it, the Common Failure Pattern that breaks the answer, and a 30-Day Move with a named output, a named owner, and a completion condition.

There is no vendor agenda here. No products are recommended. Its only job is to help you produce evidence that survives whoever asks the question first.

Volume V of The Operating Discipline for AI Library, and the opening volume of Pillar II, AI Risk Governance and Security. It extends Volumes I through IV and stands on its own. The executive who finishes this book walks into the next board meeting holding proof, not promises.

“Sinopsis” puede pertenecer a otra edición de este título.

preigu

Osnabrück, Alemania

Vendedor de 5 estrellas

Vendedor de IberLibro desde 5 de agosto de 2024

Tarifas de envío de Alemania a Estados Unidos de America

Artículo	De 60 a 60 días hábiles	De 60 a 60 días hábiles
Primer artículo	EUR 70,00	EUR 70,00

Los plazos de entrega los establecen los vendedores y varían según el transportista y la ubicación. Los pedidos que pasan por la aduana pueden sufrir retrasos y los compradores son responsables de los aranceles o tarifas asociadas. Los vendedores pueden ponerse en contacto con usted en relación con cargos adicionales para cubrir cualquier aumento en los costes de envío de los artículos.

Métodos de pago

PayPal

Descripción de la tienda

preigu betreibt einen Onlineversandhandel mit über 1 Mio. Produkten in verschiedenen Sortimenten. Das Kernsortiment besteht aus Büchern, Medien und Spielwaren. Ein gelungenes Einkaufserlebnis ist das Ziel einer jeden Bestellung bei preigu, denn der Kunde und seine Zufriedenheit stehen an erster Stelle. preigu setzt daher auf einen kompetenten Kundenservice, funktionierende Prozesse und schnelle Reaktion.

Especialidad

Bücher, Spielwaren

Información empresarial del vendedor

preigu GmbH & Co. KG

Lengericher Landstraße 19
Osnabrück, Alemania 49078

Contactar con el vendedorVer los artículos de este vendedorVer la página principal del vendedor

Condiciones de venta

About Us

Legal website operator identification:

preigu GmbH & Co. KG
Lengericher Landstr. 19
49078 Osnabrück
Germany

Telephone: +49 (0) 541 / 580 72 84
Email: mail@preigu.de

VAT No: DE 455 380 498
AG Osnabrück - HRA 209647

PhG: preigu Verwaltung GmbH
AG Osnabrück - HRB 221793
CEO: Ansas Meyer

We are neither willing nor obliged to participate in dispute resolution proceedings before consumer arbitration boards.

We are a member of the initiative "FairCommerce" since 30.11.2016.
For more information, see: https://www.haendlerbund.de/de/haendlerbund/interessenvertretung/faircommerce

Derecho al desistimiento

Instructions for revocation

Right of withdrawal for the sale of goods

Revocation right for consumers
(A ‘consumer' is any natural person who concludes a legal transaction which, to an overwhelming extent, cannot be attributed to either his commercial or independent professional activities.)

Instructions for revocation

Revocation right
You have the right to revoke this contract within 14 days without specifying any reasons.
The revocation period is 14 days with effect from the day,

on which you or a third party nominated by you, which is not the carrier, had taken possession of the products, provided you had ordered one or more products within the scope of a standard order and this/these product/products is/are delivered uniformly;
on which you or a third party nominated by you, which is not the carrier, had taken possession of the last product, provided you had ordered several products within the scope of a standard order and these products are delivered separately;
on which you or a third party nominated by you, which is not the carrier, had taken possession of the last part delivery or the last unit, provided you had ordered a product, which is delivered in several part deliveries or units;

To exercise your right of withdrawal, you must inform us (preigu GmbH & Co. KG, Lengericher Landstr. 19, 49078 Osnabrück, Telephone number: +49 (0) 541 / 580 72 84, E-Mail address: mail@preigu.de) by means of a clear declaration (e.g. a letter sent by post, or an e-mail) of your decision to withdraw from this contract. You can use the attached model withdrawal form for this purpose, which is, however, not mandatory.

You can also exercise your right of withdrawal online by clicking on a button labelled accordingly (such as ‘Withdraw from contract' or similar) on the AbeBooks/ZVAB website. If you use this online function, you will immediately receive a confirmation of receipt on a durable medium (e.g. via email) containing information on the content of the withdrawal notice, as well as the date and time of its receipt.

In order to safeguard the revocation period, it is sufficient that you send the notification about the exercise of the revocation right before the expiry of the revocation period.

Consequences of the revocation

If you revoke this contract, we shall repay all the payments, which we received from you, including the delivery costs (with the exception of additional costs, which arise from that fact that you selected a form of delivery other than the most reasonable standard delivery offered by us), immediately and at the latest within 14 days from the day on which we received the notification about the revocation of this contract from you. We use the same means of payment, which you had originally used during the original transaction, for this repayment unless expressly agreed otherwise with you; you will not be charged any fees owing to this repayment.

We can refuse the repayment until the products are returned to us or until you have furnished evidence that you have sent the products back to us, depending on whichever is earlier.

You must return or transfer the products to us immediately and, in any case, at the latest within 14 days with effect from the day on which you inform us of the revocation of this contract. The deadline is maintained if you send the products before the expiry of the 14 day deadline.

You bear the direct costs for returning the products.

You must pay for any depreciation of the products only if this depreciation can be attributed to any handling with you that was not necessary for checking the condition, features and functionality of the products.

Criteria for exclusion or expiry

The revocation right is not available for contracts

for delivery of products, which are not prefabricated and for whose manufacturing an individual selection or stipulation by the consumer is important or which are clearly tailored to the personal requirements of the consumer;
for delivery of products, which can spoil quickly or whose use-by date would be exceeded quickly;
for delivery of alcoholic drinks, whose price was agreed at the time of concluding the contract, which however can be delivered 30 days after the conclusion of the contract at the earliest and whose current value depends on the fluctuations in the market, on which the entrepreneur has no influence;
for delivery of newspapers, periodicals or magazines with the exception of subscription contracts. The revocation right expires prematurely in case of contracts
for delivery of sealed products, which are not suitable for return for reasons of health protection or hygiene if their seal has been removed after the delivery;
for delivery of products if they have been mixed inseparably with other goods after the delivery, owing to their condition;
for delivery of sound or video recording or computer software in a sealed package if the seal has been removed after the delivery.

Specimen - revocation form

(If you wish to revoke the contract, please fill up this form and send it back to us.)

To preigu GmbH & Co. KG, Lengericher Landstr. 19, 49078 Osnabrück, Email address: mail@preigu.de :
I/we () herewith revoke the contract concluded by me/ us () regarding the purchase of the following products ()/
the provision of the following service ()
Ordered on ()/ received on ()
Name of the consumer(s)
Address of the consumer(s)
Signature of the consumer(s) (only in case of a notification on paper)
Date

(*) Cross out the incorrect option.

The AI IT Security Audit(TM)

Descripción del artículo del vendedor

Detalles bibliográficos

Sinopsis