A SaaS-based LLM system has risks including prompt injection, data poisoning, and model exfiltration.

AAISM highlights the importance of an AI threat–control matrix that:

• maps threats (e.g., poisoning, exfiltration, injection)

• identifies required controls

• defines assurance/testing activities

• ensures consistent coverage across all AI components

Control baselines (A) are useful but not AI-specific. Red teaming (C) is reactive and not comprehensive. Vendor reports (D) are supplemental, not sufficient.