Ku laabo Warka
AmnigaAI Understanding warbixin kooban

CREST waxay soo bandhigtay heerka aqoonsiga ee shirkadaha tijaabinaya nidaamyada AI

SecurityBrief Asia waxay sheegaysaa in CREST ay bilawday heerka tijaabada amniga AI iyo aqoonsiga bixiyayaasha internetka, daboolaya moodooyinka iyo codsiyada ku xeeran, xogta, agabka iyo socodka shaqada.

7 min readRead the linked source
Source-provided image accompanying CREST launches accreditation standard for firms testing AI systems
Xigasho SourceIsha la duubay
Daabacaha
securitybrief.asia
Xidhiidhka isha
securitybrief.asiahttps://securitybrief.asia/story/crest-launches-ai-testing-standard-for-cyber-firms
Nooca isha
Isha ku xidhan — heerka isha aasaasiga ah lama damin.
Dulucda sheekadaKu fahan tan 60 ilbiriqsi gudahood

Halkan ka bilow

Qodobbada muhiimka ah

Xusuusta (Xusuusta Wakiilka)
Macnaha guud ee la kaydiyay wakiilka AI wuxuu isticmaalaa dhammaan tillaabooyinka ama fadhiyada si uu u horumariyo sii wadida.
AI abuurta
Nidaamyada AI ee soo saara waxyaabo cusub sida qoraal, sawirro, maqal, muuqaal, ama kood.
Soo celinta
Helitaanka dukumeenti ama diiwaano khuseeya ilaha aqoonta ee su'aal.
Is tijaabiKediska Anshaxa AI

Maxaa dhacay

SecurityBrief Asia waxa ay sheegtay in CREST ay bilowday Tijaabada Amniga ee heerka AI iyo aqoonsiga adeeg bixiyayaasha internetka. Qaab-dhismeedku waxa uu qiimeeyaa in bixiyayaasha ay leeyihiin khibradda, hababka, maamulka, xakamaynta iyo caddaynta loo baahan yahay si loo tijaabiyo hababka AI-awood u leh.

SecurityBrief Asia waxay soo warinaysaa in CREST, oo ah hay'ad caalami ah oo aan faa'iido doon ahayn heerarka amniga internetka iyo hay'adda aqoonsiga, ay bilawday Tijaabada Amniga ee heerka AI iyo aqoonsiga adeeg bixiyayaasha internetka. Ujeedada la sheegay waa in la siiyo ururada calaamad dammaanad qaadasho ah marka la dooranayo shirkadaha si ay u tijaabiyaan nidaamyada adeegsada AI abuurista ama moodooyinka luqadaha waaweyn. Maqaalku wuxuu soo bandhigayaa bilawga jawaabta farqiga suuqa: ururadu waxay qaadanayaan codsiyada AI-awood u leh iyo qulqulka shaqada, laakiin iibsadayaasha waxaa laga yaabaa inay ku adkaato go'aaminta in bixiyaha imtixaanku leeyahay khibrad farsamo oo ku habboon.

Marka loo eego SecurityBrief Asia, aqoonsigu wuxuu dejiyaa shuruudaha la qiimeyn karo ee khibradda farsamada, kartida xirfadlaha, hababka tijaabinta, maamulka, kontaroolada tayada, qalabaynta, hababka lagu aqoonsanayo khataraha amniga gaarka ah ee AI, iyo caddaynta loo isticmaalo in lagu taageero gunaanadka imtixaanka. Sidaa darteed nidaamku wuxuu qiimeeyaa labadaba awoodda tijaabada bixiyaha iyo kontaroolada ku xeeran shaqadiisa. Warbixintu waxay sheegtay in bixiyeyaasha ay tahay inay mar hore haystaan ​​aqoonsiga Imtixaanka gelitaanka CREST, ama ay ka codsadaan oggolaanshaha cusub ee tijaabada AI. Taasi waxay ku xidhaysaa nidaamka cusub saldhiga CREST ee jira ee adeegyada tijaabinta.

Warbixintu waxay sheegtay in heerku uu ula dhaqmo nidaamka AI guud ahaan halkii uu ka ahaan lahaa qaab hoose oo keliya. Baaxadda lagu sifeeyay waxaa ka mid ah codsiyada, dardargelinta iyo tilmaamaha nidaamka, hababka dib u soo celinta, ilaha xogta, xusuusta, qalabka, plugins, API-yada, lakabyada orchestration iyo nidaamyada hoose ee ay saameeyeen wax soo saarka AI. Tani waxay khusaysaa sababtoo ah baylahdu waxay ka soo bixi kartaa goobaha isdhexgalka ama kaabayaasha ku hareeraysan, oo ay ku jiraan qaabka qaabka uu u helo macluumaadka, u yeero qalabka ama u gudbiyo natiijooyinka hababka kale. SecurityBrief Asia waxay soo warinaysaa in heerka la soo saaray waaxda iyada oo loo sii marayo CREST's AI Working Group.

Madaxa fulinta ee CREST Nick Benson ayaa u sheegay SecurityBrief Asia in xubnaha iyo macaamiishu ay rabeen macluumaad dheeraad ah oo ku saabsan bixiyayaasha 'Ai-tijabinta shahaadooyinka iyadoo macaamiishu ay geeyeen tignoolajiyada karti u leh AI. Benson wuxuu u kala saaray adeegsiga weedha "tijaabada amniga ee nidaamyada AI" iyo muujinta khibradda iyo hababka loo baahan yahay si loo qabto shaqadaas. Maqaalka ayaa sidoo kale xiganaya agaasimaha farsamada ee Senrium Security Tim Reed iyo madaxa kooxda wizlynx ee adeegyada amniga internetka Yann Chalençon, labaduba waxay taageeraan qaabka. Faallooyinkoodu waa taageerada warshadaha, maaha qiimayno madax-bannaan oo heerka.

SecurityBrief Asia waxay gelisaa bilawga barnaamijka hubinta AI ee ballaadhan ee CREST. Maqaalku wuxuu leeyahay CREST waxay soo bandhigtay heerka Imtixaanka gelitaanka AI-Enabled bishii Luulyo, diiradda saaraya sida bixiyayaasha u isticmaalaan AI marka ay bixinayaan adeegyada tijaabada. Aqoonsiga cusub ee la soo sheegay wuxuu ka hadlayaa su'aasha kala duwan ee ah in bixiyeyaasha ay tijaabin karaan nidaamyada AI laftooda. Warbixintu waxa kale oo ay sheegtay in in ka badan 100 hay’adood oo asaasay amniga internetka ay saxeexeen CREST’s AI Charter iyo AI Mabaadi’da, taas oo ka dhigan in ka badan 10% xubinnimadeeda adduunka oo dhan. Tirooyinkan iyo sharraxaadahan si madaxbanaan looma xaqiijin qiimayntan.

Faahfaahinta isha: securitybrief.asia ↗

Maxay muhiim u tahay

Qiimaynta amniga AI ayaa sii kordheysa ku lug leh in ka badan tijaabinta moodalka goonida ah. Aqoonsiga rasmiga ahi waxa uu hay'adaha siin karaa calaamad soo iibsi oo cad oo alaab-qeybiyaha ah, in kasta oo aanay warbixintu si madax-bannaan u caddaynin sida ballaaran ee qorshaha loo qaadan doono ama haddii ay hagaajinayso natiijooyinka imtixaanka.

Muhiimadda la taaban karo ayaa ah in tijaabada AI ay noqoto dhibaato wax soo iibsi iyo maamul, ma aha oo kaliya mid farsamo. Shirkad u xilsaaraysa qiimayntu waxa ay u baahan kartaa kalsooni ah in iibiyuhu fahmayo khalkhalgelinta degdega ah, khataraha soo celinta, helista qalabka, maaraynta xogta, xusuusta, abaabulka iyo saamaynta hoose. SecurityBrief Asia waxa ay soo warisay in qaabka CREST loo qorsheeyay in awoodahaas la qiimeeyo. Haddii iibsadayaashu u isticmaalaan aqoonsiga qayb ka mid ah alaab-qeybiyaha, waxay ka dhigi kartaa sheegashada bixiyaha mid sahlan in la barbardhigo.

Xooga saarista nidaamka oo dhan sidoo kale waa natiijo. Tijaabinta kaliya ee jawaabaha moodeelka waxa laga yaabaa inay seegto daciifnimada codsiga ku xeeran: kala sareynta tilmaamaha ayaa laga yaabaa in la kashifo, isha dib u soo celinta ayaa laga yaabaa in la sumeeyo, qalab ku xidhan waxa laga yaabaa in uu haysto ogolaansho xad dhaaf ah, ama wax soo saarku waxa uu dhalin karaa ficil aan badbaado lahayn. Isha ma sheegto wax nuglaanta ama natiijada tijaabada ah ee nidaamka cusub, markaa ma muujinayso in qaab-dhismeedka uu helay ama ka hortagay guuldarrooyinkan. Waxay ka warbixisaa baaxadda iyo shaqada hubinta ee loogu talagalay aqoonsiga.

Qaab-dhismeedku waxa kale oo uu saamayn ku yeelan karaa waxa bixiyayaasha dukumeentiya. SecurityBrief Asia waxay leedahay CREST waxay qiimayn doontaa maamulka, kontaroolada tayada, hababka iyo caddaynta iyo sidoo kale xirfadda farsamada. Xooga saarista ayaa laga yaabaa inay ku dhiirigeliso shirkadaha inay sharaxaan sida kiisaska tijaabada loo doortay, sida natiijooyinka loo ansaxiyay, sida xaddidaadaha loo diiwaan geliyo iyo sida gabagabada loo taageero. Macaamiisha, tani waxay noqon kartaa mid faa'iido badan marka loo eego sheegashada qaawan ee bixiyaha uu khibrad u leeyahay AI. Warbixintu ma sheegin habka dhibcaha, gudbinta xadka, wareegga dib u qiimaynta ama helitaanka dadweynaha ee warbixinnada qiimaynta.

Farqiga udhaxeeya heerka Imtixaanka Gelida ee Luuliyo AI-Enabled iyo aqoonsigan cusub waa muhiim. Mid ayaa quseeya isticmaalka AI ee adeeg bixiyaha tijaabada; Midda kale waxay khusaysaa awoodda bixiyaha si uu u tijaabiyo nidaamyada AI. Hawlahaas waxay ku lug yeelan karaan khataro iyo kartiyo kala duwan. Shirkad ayaa laga yaabaa inay u isticmaasho AI si ay u dardargeliso shaqada amniga caadiga ah iyada oo aan u qalmin qiimeynta hab-dhaqanka moodeelka, dhuumaha soo celinta ama isku-dhafka qalabka wakiilka u eg. Taa beddelkeeda, aqoonsiga-tijaabada AI lafteedu ma caddaynayso in ka-qaybgal kasta uu si fiican u xaddidan yahay ama in meel-marin gaar ah uu sugan yahay.

Saamaynta dadwaynaha ayaa ah mid aan la hubin sababta oo ah isha laga helay ma jirto iibsade madax banaan, maamule ama qiimayn tacliimeed. Taageerada la soo sheegay ee xubnaha CREST waxay muujinaysaa in bixiyayaasha ka qaybqaata ay u arkaan qiimaha nidaamka, laakiin ma dejiso aqbalaadda suuqa. Sidoo kale maqaalku ma muujinayo in aqoonsiga ay yarayso shilalka, ay wanaajiso ogaanshaha nuglaanshaha ama ay keento natiijooyin joogto ah bixiyeyaasha oo dhan. Kuwa aan la garanayn waa in ay ka cadhaysiiyaan sheegasho kasta oo ah in bilaabistu ay dhisto bar tayo leh oo ballaadhan oo warshadaha ah.

Interactive Mechanism

Farsamaynta Is-dhexgalka: Sida Dhabta Ay U Shaqeyso

U baadh tignoolajiyada hoose ee ka dambeeya horumarkan si isdhexgal leh.

Agent Lifecycle Stage:
1
User Intent & Planning: "Audit customer refund request #4092 and settle payment."
2
Tool Calling: Emits structured JSON call crm_get_transaction(id='4092').
3
Guardrail & Verification:🛡️ Paused: High-value action requires human operator sign-off.
4
Final Settlement: Refund recorded, email receipt dispatched, and audit log stored.
Core takeaway: An AI agent is not just a language model—it is a closed loop of planning, tool invocation, and environment feedback. Production systems require self-healing retries and strict human approval guardrails.
Hubinta Fikradda Is-dhexgalka+10 Points
AI Ethics Quiz

Why can ethical evaluation not be reduced to one model score?

Maxaa la daawan doona xiga

Su'aalaha muhiimka ah ayaa ah in iibsadayaashu ay u baahan yihiin aqoonsiga, sida CREST ay u qiimeyso bixiyeyaasha ficil ahaan, iyo haddii heerku uu soo saaro tayada tijaabinta la midka ah ee iibiyaasha. Warbixintu ma bixiso heerka buuxa, natiijooyinka qiimaynta, jadwalka fulinta ama jawaabaha madax-banaan ee iibsadayaasha iyo maamulayaasha.

Arrinta ugu horreysa ee la daawado waa korsashada iibsadayaasha. SecurityBrief Asia waxay u aqoonsataa soo iibinta iyo alaab-qeybiyaha ku dadaalida saxda ah inay yihiin hadafyada dhexe, laakiin ma soo sheegto in ururada waaweyni u baahan yihiin aqoonsiga hindise ama qandaraasyada. Caddaynta in iibsadayaashu u isticmaalaan si ay u kala saaraan bixiyeyaasha waxay tusinaysaa in nidaamku noqday wax ka badan aqoonsiga xirfadle ee iskaa wax u qabso ah. Iibsadaha la'aanteed, aqoonsigu wuxuu ugu horreyn u adeegi karaa calaamad gudaha suuqa adeegyada amniga internetka.

Arrinta labaad waa hufnaan ku saabsan qiimaynta. Warbixintu waxay magacawday meelo ballaadhan oo qiimayn ah laakiin ma bixiso heerka kontaroolada faahfaahsan, hababka tijaabada, shuruudaha caddaynta ama shuruudaha gudbinta. Kormeerayaashu waa inay raadiyaan macluumaadka ku saabsan sida CREST u baadho kartida bixiyaha, inta jeer ee aqoonsiga dib loo cusboonaysiiyo, sida khilaafyada danaha loo maareeyo iyo haddii qiimayno guuldarraystay ama xaddidan la shaaciyay. Faahfaahintaani waxay kaa caawin doontaa in la go'aamiyo inta kalsoonida aqoonsiga ay si macquul ah u taageeri karto.

Arrinta saddexaad waa caymiska farsamada. Hawlgalinta AI aad ayey u kala duwan tahay, laga bilaabo qaababka fudud ee qaabka luqadda ilaa nidaamyada leh dib u soo celinta, xusuusta, aaladaha dibadda, API-yada iyo ficillada hoose ee tooska ah. Baaxadda nidaamka oo dhan ee CREST waa mid ballaadhan, laakiin maqaalku ma sharraxayo sida qiimayntu u maarayn doonto kala duwanaanshaha qaab dhismeedka, helitaanka moodeelka, dareenka xogta ama saamaynta hawlgalka. Tilmaamaha mustaqbalka ama daraasadaha kiis ee la daabacay ayaa muujin kara in halbeeggu uu yahay mid wax ku ool ah dhammaan goobahan halkii uu ka ahaan lahaa mid kooban oo sharraxaad ah.

Arrinta afraad waa caddaynta natiijada. Xubnaha CREST ee lagu soo xigtay warbixinta ayaa sheegaya in qaabdhismeedku uu abuuri karo joogtayn iyo xoojinta kalsoonida, laakiin taasi waa rajooyin halkii la cabbiri lahaa natiijooyinka. Caddaynta daba-galka ah ee waxtarka leh waxaa ka mid noqon kara natiijooyinka qiimaynta qarsoodiga ah, tusaaleyaal daciifnimo-gaar ah oo AI ah oo lagu ogaaday imtixaan la aqoonsan yahay, ama isbarbardhigga muujinaya in bixiyeyaasha la aqoonsan yahay ay soo saaraan natiijooyin la isku halleyn karo. Midkoodna caddayntaas kuma jiraan meesha laga soo xigtay, bilawga waa in aan loola dhaqmin caddaynta amniga soo hagaagay.

Ugu dambeyntii, xiriirka la leh qaababka kale ee AI-ammaanka ayaa muhiim ah. Maqaalku wuxuu qeexayaa CREST barnaamijkeeda hubinta AI laakiin kama hadlayso sida aqoonsigeedu ula jaanqaado hagida dawladda, xeerarka u gaarka ah qaybaha ama heerarka kale ee imtixaanada. Iibsadayaasha ayaa laga yaabaa inay u baahdaan inay ku daraan qiimaynta halista, dhaqamada horumarka sugan, kontaroolada gelitaanka, la socodka iyo dib u eegista aadanaha. SecurityBrief Asia ayaa ka warbixisay daahfurka iyo doorka loogu talagalay; si madaxbanaan uma xaqiijinayso barnaamijka gaaritaanka ugu danbeyn, wax ku oolnimada, aqoonsiga sharciyeynta ama jadwalka qiimaynta bixiyaha.

Tilmaamaha la xidhiidha & su'aalaha

Anshaxa AIWakiilada AIMoodooyinka AI ayaa la sharaxayChatGPT iyo LLMsTijaabi waxaad taqaan - isku day kedis AI oo bilaash ahKa raadi erey AI qaamuuskeenaRaac raadraaca sharciyeynta AI
Tan faa'iido ma u heshay?