Cybersecurity Today TV - Ep 79 - Who Governs the AI? Inside the ADG Operating Model

Value of the Information & Strength of the Argument

The video provides valuable insights into AI governance from an industry expert, highlighting practical challenges and the need for a structured framework. The argumentation is coherent and based on professional experience, but it lacks empirical evidence or case studies to support claims. The discussion is largely promotional for EC-Council’s new framework, which may introduce bias. The value lies in raising awareness of AI governance issues and offering a structured approach, but the lack of independent validation limits its scientific rigor.

Scientific Rigor, Source Quality, Title Accuracy

The video does not cite specific sources beyond mentioning frameworks like NIST, ISO, OWASP, and MITRE ATT&CK. The description provides no links to the framework or supporting documents. The title accurately reflects the content, focusing on AI governance and the ADG framework. The information is based on expert opinion rather than peer-reviewed research, and the framework is newly launched, so its effectiveness is unproven. The lack of verifiable sources reduces the overall reliability.

The title accurately reflects the content, focusing on AI governance and the ADG framework.

6/10

The video features an expert interview with Wesley Alvarez from EC-Council, discussing the ADG framework. The information is based on expert opinion and industry experience, but lacks empirical data or peer-reviewed sources. The framework is newly launched and not yet independently validated.

Markers derived by PSI from the transcript: the creator did not define chapters.

• 00:00Introduction to the show and overview of segments.
• 01:00Cyber Bytes segment: Microsoft patches Defender vulnerabilities, Carnival Cruise breach, GitHub repository access.
• 03:00Introduction of guest Wesley Alvarez and discussion on AI governance challenges.
• 05:00Explanation of the ADG framework and its purpose.
• 07:00Discussion on common mistakes in AI implementation, including treating AI as traditional software.
• 09:00Risks of not having AI governance, including hallucinations and lack of audit trails.
• 11:00Breakdown of the ADG components: Adopt, Defend, Govern.
• 13:00Discussion on agentic AI and the need for human intervention.
• 15:00Mapping to OWASP Top 10 and other frameworks.
• 17:00Misunderstood AI threats: prompt injection, indirect prompt injection, context as attack surface.
• 19:00Plans for updating the framework and balancing innovation with accountability.

• OWASP Top 10 for LLM Applications — Mentioned as a framework to which ADG maps controls.
• NIST AI Risk Management Framework — Mentioned as a standard that ADG complements.
• MITRE ATT&CK — Mentioned as a framework aligned with EC-Council's cybersecurity training.

• NIST AI Risk Management Framework — Both emphasize the need for AI governance and risk management.
• OWASP Top 10 for LLM Applications — Both highlight common AI vulnerabilities and the need for security measures.