Abbreviations

ABAC
attribute-based access control
AI
artificial intelligence
API
application programming interface
AWS
Amazon Web Services
BIML
Berryville Institute of Machine Learning
CI/CD
continuous integration/continuous delivery
CISA
Cybersecurity and Infrastructure Security Agency
CMMC
Cybersecurity Maturity Model Certification
GPAISR
general-purpose AI models with systemic risk
HIPAA
Health Insurance Portability and Accountability Act
HITL
human-in-the-loop
IAM
identity and access management
IDS
intrusion detection system
IPS
intrusion protection system
ISO
International Organization for Standardization
IT
information technology
LLM
large language model
MFA
multifactor authentication
ML
machine learning
NCSC
National Cyber Security Centre
NIST
National Institute of Standards and Technology
NSA
National Security Agency
OWASP
Open Web Application Security Project
RAG
retrieval-augmented generation
RBAC
role-based access control
ReBAC
relationship-based access control
RL
reinforcement learning
SBOM
software bill of materials
SP
Special Publication
SSRF
server-side request forgery
TEE
trusted execution environments
VM
virtual machine