NIST SP 800-218A: Secure Software Development for Generative AI
A profile of NIST's Secure Software Development Framework for generative AI and dual-use foundation models.
Published by National Institute of Standards and Technology
How to use it
This profile helps AI model producers, application developers, and purchasers build security requirements into their software development processes. Use it when deciding what evidence to keep for a release and what assurance to request from a supplier.
For a model update, document the source and version of each component, the security checks that were run, and who can approve release. Keeping that record makes it easier to investigate incidents and replace affected components.
- Access
- Public guidance