C6: Security Mitigations

Implement cybersecurity protections for the model and infrastructure.

Step 6 of 10

Commitment Progress0% (0/5)

REQ-6.1-01Measure 6.1 (Page 18)

Has a Security Goal been defined relating to specific threat actors?

"Signatories will define a goal that specifies the threat actors that their security mitigations are intended to protect against ('Security Goal')."

REQ-6.1-02Measure 6.1 (Page 18)

Does the Security Goal explicitly cover non-state, insider, and other expected threats?

"Including non-state external threats, insider threats, and other expected threat actors, taking into account at least the current and expected capabilities."

REQ-6.2-01Measure 6.2 (Page 18)

Are appropriate security mitigations implemented to meet the Security Goal?

"Signatories will implement appropriate security mitigations to meet the Security Goal, including the security mitigations pursuant to Appendix 4."

REQ-6.2-02Measure 6.2 (Page 18)

If deviating from standard mitigations, are alternative mitigations justified and implemented?

"If Signatories deviate... they will implement alternative security mitigations that achieve the respective mitigation objectives."

REQ-6.2-03Measure 6.2 (Page 18)

Are security mitigations staged in line with model capabilities?

"The implementation... may be staged appropriately in line with the increase in model capabilities along the entire model lifecycle."