Would a vendors other customers change your security assessment?
Source Reddit Cybersecurity
Discussion
This content discusses concerns about AI training data vendors working with multiple customers, including competing entities such as US government agencies and Chinese labs. It raises questions about the separation of confidential data and the potential risks in vendor security assessments. The discussion highlights challenges in verifying data segregation and the implications for risk assessments in cybersecurity.
r/cybersecurity (opens in a new tab)u/caliberprot0 points0 comments
Saw this Forbes piece about AI training data companies working with both US government customers and Chinese labs.
If a vendor builds training material for several competing customers, where does reusable expertise end and confidential customer work begin? How do you actually verify that customer data stays fully separate?
For people doing risk assessments, how deep can you usually dig into this?