2025人工智能与网络安全：风险与收益的平衡策略白皮书 英文版 .docxVIP

AIGovernanceAlliance

IncollaborationwiththeGlobalCyberSecurityCapacityCentre,UniversityofOxford

TransformationofIndustriesintheAgeofAI

ArtificialIntelligenceandCybersecurity:BalancingRisks

andRewards

WHITEPAPERJANUARY2025

Images:GettyImages

Contents

Readingguide 3

Foreword 4

Executivesummary 5

Introduction:Thescope 6

1ThecontextofAIadoption–fromexperimentation

tofullbusinessintegration 8

2EmergingcybersecuritypracticeforAI 10

2.1Shiftleft 11

2.2Shiftleftandexpandright 11

2.3Shiftleft,expandrightandrepeat 11

2.4Takinganenterpriseview 11

3Actionsforseniorleadership 12

4StepstowardseffectivemanagementofAIcyberrisk 14

4.1Understandinghowtheorganization’s

contextinfluencestheAIcyberrisk 14

4.2Understandingtherewards 15

4.3Identifyingthepotentialrisksandvulnerabilities 15

4.4Assessingpotentialnegativeimpactstothebusiness 17

4.5Identifyingoptionsforriskmitigation 19

4.6Balancingresidualriskagainstthepotentialrewards 21

4.7RepeatthroughouttheAIlifecycle 21

Conclusion 22

Contributors 23

Endnotes 27

Disclaimer

Thisdocumentispublishedbythe

WorldEconomicForumasacontributiontoaproject,insightareaorinteraction.Thefindings,interpretationsandconclusionsexpressedhereinarearesultofacollaborativeprocessfacilitatedandendorsedbytheWorldEconomicForumbutwhoseresultsdonotnecessarily

representtheviewsoftheWorldEconomicForum,northeentiretyofitsMembers,Partnersorotherstakeholders.

?2024WorldEconomicForum.Allrightsreserved.Nopartofthispublicationmaybereproducedortransmittedinanyformorbyanymeans,includingphotocopyingandrecording,orbyanyinformationstorageandretrievalsystem.

ArtificialIntelligenceandCybersecurity:BalancingRisksandRewards 2

Readingguide

TheWorldEconomicForum’sAITransformationofIndustriesinitiativeseekstocatalyseresponsibleind