NIST SP 800-218A
Produce Well-Secured Software (PW) – NIST SP 800-218A

NIST SP 800-218A PW.4.4: Verify integrity, provenance and security of acquired models and components before use (High)

What does PW.4.4 require?

Before using an existing AI model or any acquired AI component (training, test, fine-tuning and alignment datasets, reward models, adaptation layers, configuration parameters), the organisation verifies its integrity, provenance and security, and scans and thoroughly tests acquired models and components for vulnerabilities and malicious content.

Maintained by Gerard Blokdyk

Other controls in Produce Well-Secured Software (PW) – NIST SP 800-218A

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.