05.01Penetration Testing & Assessment
Assess organizations and their networks, systems, applications, and operating environments within an agreed, authorized scope. Identify exposed attack surfaces, validate exploitable vulnerabilities and attack paths, and provide risk ratings and remediation recommendations.
05.02Model Safety & Security Evaluation
Evaluate applicable risks, including adversarial inputs, sensitive information disclosure, jailbreaks, and harmful outputs, based on model type, access method, and task context. Document test conditions, results, limitations, and improvement recommendations.
05.03Security Capability Development
Build coordinated defenses across identity and access, networks and systems, models and applications, monitoring, alerting, and incident response, covering attack prevention, detection, and response.
05.04Compliance Assessment & Improvement
Identify applicable legal and regulatory requirements based on operating jurisdictions, business activities, and data processing. Assess gaps and implement technical, procedural, and documentation improvements with traceable remediation records.