{
  "slug": "enterprise-ai-security-checklist",
  "title": "Enterprise AI Security Checklist — LLM, RAG & Agent Hardening",
  "h1": "Enterprise AI security checklist",
  "shortTitle": "Security Checklist",
  "description": "Prompt injection, data exfiltration, agent permissions — a practical LLM security review.",
  "url": "https://aieconomyhub.co/enterprise-ai-security-checklist",
  "apiUrl": "https://aieconomyhub.co/api/page/enterprise-ai-security-checklist",
  "category": {
    "id": "enterprise",
    "label": "Enterprise & Governance"
  },
  "kind": "checklist",
  "top": false,
  "lastUpdated": "2026-06-21",
  "faqs": [
    {
      "q": "Is prompt injection a real threat?",
      "a": "Yes, especially indirect injection via retrieved content. Any agent that reads emails, PDFs, or a knowledge base is attackable. Defense: treat retrieved content as untrusted data, restrict tool permissions, require human approval for external actions."
    },
    {
      "q": "Do I need SOC 2 to ship AI?",
      "a": "Not universally. Required for most enterprise B2B deals. For consumer or internal use, SOC 2 is optional but still a useful checklist to work toward."
    },
    {
      "q": "What about open-source models — different security posture?",
      "a": "Mostly the same threats (injection, output handling, tool confusion). Self-hosted models remove the vendor supply-chain risk but add ops/patching burden."
    },
    {
      "q": "Who owns AI security?",
      "a": "Security team owns the controls; engineering owns the implementation. AI governance committee (if you have one) owns the policy. Not a single owner — a RACI across three functions."
    },
    {
      "q": "How often should I red-team?",
      "a": "Quarterly for production systems, plus before every major launch. Use OWASP LLM Top 10 as the attack tree."
    }
  ],
  "howto": null,
  "dataset": null,
  "relatedTools": [
    {
      "slug": "ai-readiness-assessment",
      "title": "AI Readiness",
      "url": "https://aieconomyhub.co/ai-readiness-assessment",
      "apiUrl": "https://aieconomyhub.co/api/page/ai-readiness-assessment"
    },
    {
      "slug": "ai-adoption-roadmap",
      "title": "Adoption Roadmap",
      "url": "https://aieconomyhub.co/ai-adoption-roadmap",
      "apiUrl": "https://aieconomyhub.co/api/page/ai-adoption-roadmap"
    },
    {
      "slug": "ai-governance-checklist",
      "title": "Governance Checklist",
      "url": "https://aieconomyhub.co/ai-governance-checklist",
      "apiUrl": "https://aieconomyhub.co/api/page/ai-governance-checklist"
    },
    {
      "slug": "ai-product-launch-planner",
      "title": "Launch Planner",
      "url": "https://aieconomyhub.co/ai-product-launch-planner",
      "apiUrl": "https://aieconomyhub.co/api/page/ai-product-launch-planner"
    }
  ],
  "attribution": {
    "canonicalUrl": "https://aieconomyhub.co/enterprise-ai-security-checklist",
    "requirement": "Free to use. When embedding this data, please link back to the canonical URL above with the link text \"Security Checklist\".",
    "license": "CC-BY-4.0 (attribution required)"
  }
}