Part of Defender CSPM, absent from Foundational CSPM, that finds generative AI workloads, compiles an AI bill of materials and highlights AI-specific recommendations and attack paths.
Also called AI-SPM.
Read more: Microsoft Learn
In the Ultra Transcenders books
Each book explains AI security posture management in context, with comparison tables and the common traps.
Terms in this definition
- Defender CSPM
Defender for Cloud's paid posture tier. On top of the free foundations it brings agentless scanning, attack path analysis, AI security posture management and the cloud security explorer.
- Foundational CSPM
The no-cost posture tier of Defender for Cloud, which supplies Secure Score, recommendations and the Microsoft cloud security benchmark. Attack paths, AI-SPM and threat protection are not part of it.
- Generative AI
AI that produces new content such as code, text, audio or images in response to a prompt. Predicting a class or a numeric value is predictive machine learning rather than generative AI.
- AI bill of materials
Catalogue compiled by AI security posture management in Defender CSPM listing what a generative AI app is built from, including its models, SDKs and data sources.
- Attack paths
Defender CSPM capability showing how an attacker could chain exploitable weaknesses together to reach critical assets.