Lessons From the C-I-A Triad to Build Trustworthy AI | Cyber & AI Perspectives

Dejan Kosutic explains how cybersecurity’s CIA Triad—confidentiality, integrity, and availability—has guided risk identification, prioritization, and control selection for decades, and argues that AI governance needs a similarly clear guiding principle: trustworthiness. Citing the OECD AI Principles, the EU AI Act, and the NIST AI Risk Management Framework, he describes trustworthiness as central to broader AI adoption because AI systems are non-deterministic and can produce different outputs from the same inputs. He shows how trustworthiness can steer AI risk management by helping organizations identify risks like biased outputs, assess impact through trust and reputational damage, and choose controls such as trusted training data or human review. 

LINK FROM THE EPISODE
► AI Goals and Objectives: Why is Trustworthiness Important? | AI Literacy Series https://www.youtube.com/watch?v=AnZLw9IRh4E

• (00:00) - What the C-I-A Triad can teach us about AI
• (00:32) - Why is the C-I-A Triad important for cybersecurity?
• (02:15) - Importance of trustworthiness for AI
• (03:30) - Applying cyber logic to AI
• (04:56) - Addressing larger AI challenges