Best practices for auditing and security monitoring in GenAI services
Auditing is a crucial part of data protection.
There are many topics to review when talking about auditing and monitoring in GenAI services. Here are two of them:
- User’s activity logs: To identify abuse attempts against a GenAI service (such as attempts to exfiltrate data from a model)
- GenAI admin activity: To detect rogue admin activity (such as disabling guardrails, which may result in customers receiving harmful content as a response from a model)
Follow the best practices here for auditing and monitoring in GenAI services:
- Although admin activity is automatically audited by the CSPs, its log history is limited. As best practice, send all audit and monitoring logs to central storage for further analysis, for incident response, and to comply with various regulations.
- Add threat detection solutions to review the logs and generate prioritized follow-up actions.
