NIST SP 800-218A
Produce Well-Secured Software (PW) – NIST SP 800-218A

NIST SP 800-218A PW.5.1: Secure coding practice extended to AI, with careful handling of inputs and outputs (High)

What does PW.5.1 require?

Secure coding practice is widened to take in AI technology-specific considerations. The handling of inputs (prompts and user data included) and outputs is coded with care: inputs and outputs are logged, analysed and validated in the model's context, those with problems are sanitised or dropped, and inputs and outputs are encoded so that unauthorised code cannot execute. The organisation may adopt secure model serialisation mechanisms that reduce or remove routes for introducing malicious content.

Maintained by Gerard Blokdyk

Other controls in Produce Well-Secured Software (PW) – NIST SP 800-218A

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.