AI Runtime Security Questionnaire

The interactive questionnaire needs JavaScript. The questions read as a checklist below; for a guided pass with our team, request an assessment.

1. Visibility When your teams use approved AI tools, what can you see of that activity? Live interaction records · aggregate usage · provider dashboards · network traffic only · little to none
2. Shadow AI How does your organization handle AI tools that teams adopt on their own? Discover and route to a governed path · block known domains · policy only · no position yet
3. Prompt injection Could instructions hidden in content your AI tools read steer them? Screened on every interaction · periodic red-teaming · provider safeguards · new to us
4. Data in flight If someone pastes customer records into an AI chat, what happens? Checked in flight · found afterward in logs · training and policy · cannot say
5. Agent actions When an AI agent calls tools or writes to systems, what governs each action? Policy per action with approval gates · permissions set once · after-the-fact review · no agents yet
6. Spend Where does your picture of AI spend come from? Metered live with enforcing budgets · monthly invoices · scattered, unowned · not yet examined
7. Evidence An auditor asks how AI handled customer data last quarter. What can you show? Decision records ready to export · logs across systems · policy documents · very little