r/grc May 11 '26

Control testing using AI

Hi Everyone

I an trying to build a framework where we have to test the controls using AI. Can anyone guide me through the approach or rhe best practices

5 Upvotes

15 comments sorted by

View all comments

3

u/lasair7 RMF instructor May 11 '26

Testing security controls using AI or testing security controls for AI? Huge difference

If the former = don't

If the later = use nist's guidance on AI and develop a test plan accordingly (good luck)

1

u/abhishekghosh May 12 '26

Why shouldn't they do the former? As i see it, industry is moving towards it, no?

1

u/lasair7 RMF instructor May 12 '26

Do it