Regular threat modeling allows organizations to proactively identify vulnerabilities specific to AI, such as:
* Data poisoning
* Model inversion attacks
* Membership inference attacks
* Prompt injection
* Unauthorized model manipulation AAIA highlights AI threat modeling as essential for anticipating and mitigating AI-specific security risks that traditional IT threat modeling does not fully address. Option C (regulatory compliance) is a secondary benefit. Option D (drift prevention) is unrelated. Option B relates to performance, not security. The primary purpose is early identification of security weaknesses before exploitation occurs.
References:
AAIA Domain 2: Threats and Vulnerabilities Specific to AI.
AAIA Domain 1: Risk Assessment and Control Planning.