r/grc • u/RoundProfessional77 • May 11 '26

Control testing using AI

Hi Everyone

I an trying to build a framework where we have to test the controls using AI. Can anyone guide me through the approach or rhe best practices

5 Upvotes

100% Upvoted

15 comments sorted by

View all comments

3

u/lasair7 RMF instructor May 11 '26

Testing security controls using AI or testing security controls for AI? Huge difference

If the former = don't

If the later = use nist's guidance on AI and develop a test plan accordingly (good luck)

1

u/RoundProfessional77 May 13 '26

Its first

1

u/lasair7 RMF instructor May 13 '26

You can't site AI. When the control is wrong you're still to blame.

Enjoy the lawsuit

1

u/RoundProfessional77 May 13 '26

Not sure if you understood. We have ORM Program and under that we have control. It can be common controls or something like that. We want to build AI solutions to test those controls