人工智能用例中的安全和隐私 最佳实践

[中文适用范围]： 本文件概述了评估人工智能用例中的安全性和隐私的最佳实践，特别是涵盖了 ISO/IEC TR 24030 中发布的最佳实践。涉及以下方面：——对感兴趣的人工智能系统的安全性和隐私的总体评估；——安全和隐私问题；——安全和隐私风险；——安全和隐私控制；——安全和隐私保证；以及——安全和隐私计划。安全和隐私被分开处理，因为安全性分析和隐私分析可能有所不同。 [外文原描述]： This document outlines best practices on assessing security and privacy in artificial intelligence use cases, covering in particular those published in ISO/IEC TR 24030. The following aspects are addressed: — an overall assessment of security and privacy on the AI system of interest; — security and privacy concerns; — security and privacy risks; — security and privacy controls; — security and privacy assurance; and — security and privacy plans. Security and privacy are treated separately as the analysis of security and the analysis of privacy can differ.