Thank you for sending your enquiry! One of our team members will contact you shortly.
Thank you for sending your booking! One of our team members will contact you shortly.
Duration 21 hours
Course Outline
Foundations: Threat Modelling for Agentic AI
- Categorising agentic threats: misuse, privilege escalation, data leakage, and supply-chain risks.
- Analysing adversary profiles and attacker capabilities specific to autonomous agents.
- Mapping assets, trust boundaries, and critical control points for agent operations.
Governance, Policy, and Risk Management
- Developing governance frameworks for agentic systems, including roles, responsibilities, and approval gates.
- Designing policies for acceptable use, escalation rules, data handling, and auditability.
- Addressing compliance considerations and gathering evidence for audits.
Non-Human Identity & Authentication for Agents
- Designing agent identities: service accounts, JWTs, and short-lived credentials.
- Implementing least-privilege access patterns and just-in-time credentialing.
- Managing the identity lifecycle, including rotation, delegation, and revocation strategies.
Access Controls, Secrets, and Data Protection
- Applying fine-grained access control models and capability-based patterns for agents.
- Managing secrets, ensuring encryption-in-transit and at-rest, and practising data minimisation.
- Protecting sensitive knowledge sources and PII from unauthorised agent access.
Observability, Auditing, and Incident Response
- Designing telemetry for agent behaviour: intent tracing, command logs, and provenance tracking.
- Integrating with SIEM, setting alerting thresholds, and ensuring forensic readiness.
- Developing runbooks and playbooks for agent-related incidents and containment strategies.
Red-Teaming Agentic Systems
- Planning red-team exercises: defining scope, rules of engagement, and safe failover procedures.
- Utilising adversarial techniques: prompt injection, tool misuse, chain-of-thought manipulation, and API abuse.
- Conducting controlled attacks and measuring exposure and impact.
Hardening and Mitigations
- Implementing engineering controls: response throttles, capability gating, and sandboxing.
- Enforcing policy and orchestration controls: approval flows, human-in-the-loop mechanisms, and governance hooks.
- Applying model and prompt-level defences: input validation, canonicalisation, and output filters.
Operationalising Safe Agent Deployments
- Adopting deployment patterns: staging, canary releases, and progressive rollouts for agents.
- Managing change control, testing pipelines, and pre-deploy safety checks.
- Fostering cross-functional governance: aligning security, legal, product, and ops playbooks.
Capstone: Red-Team / Blue-Team Exercise
- Executing a simulated red-team attack against a sandboxed agent environment.
- Defending, detecting, and remediating as the blue team using available controls and telemetry.
- Presenting findings, remediation plans, and necessary policy updates.
Summary and Next Steps
Requirements
- A solid foundation in security engineering, system administration, or cloud operations.
- Familiarity with AI/ML concepts and the operational behaviour of large language models (LLMs).
- Practical experience with identity & access management (IAM) and secure system design.
Audience
- Security engineers and red-team specialists.
- AI operations and platform engineers.
- Compliance officers and risk managers.
- Engineering leads with responsibility for agent deployments.
Testimonials (1)
inventory and identifying the different risk exposures within AI
