Cybersecurity and Governance Checklist

Introduction

We encourage everyone to suggest improvements for the 2.0 release of the OWASP Top 10 for LLM Applications Cybersecurity and Governance Checklist and especially encourage contributions from everyone who is interested in improving and expanding the checklist to be used as a reference for integrating and defending Large Language Models for their organization.

For more information on how you can contribute or to submit a suggested edit, please visit the contributing guidelines & how to report an issue.

The Slack Channel dedicated to the checklist is #team-llm_ai-secgov

I. Scope

The primary purpose of the check list is for organizations to consider distinct perils that are unique to Large Language Models and incorporating protecting and using them in a resilient, threat informed defensive strategy. See OWASP AI Exchangefor guidance on regulatory and legal compliance

Checklist Request for Comment Feedback Link for v 2.0

II. 🗺️Roadmap for v 2.0

• May 27, 2024–June 19, 2024: Public request for comment on v1.0, suggestions on improvements, and call for volunteers.
• July 8, 2024-July 18, 2024: Develop Road Map
• July 18, 2024: Present road map at LLM Top 10 Weekly Meeting
• July 22, 2024–October 1, 2024: Two-week sprints
• October 15, 2024: Publish v2 draft
• November 15, 2024: Publish v2