Your security lifecycle is running. The queue keeps growing anyway.
That is the paradox behind Secure by Design in the Age of AI: The Product Security Operating Model for the AI Era, Volume VII in The Operating Discipline for AI Library. Product security teams that added an AI addendum to a lifecycle they trusted are watching pull requests pile up while nobody skips a single gate. Stephen R. Jordan names the cause the Dual-Impedance Problem: assisted and agentic development roughly doubles the rate of change while shipping a new kind of risk, models, prompts, retrieval, tools, agents, memory, that a reviewer trained on code was never built to catch. Adding reviewers does not fix kind. Adding AI-specific steps does not fix rate. And AI-assisted code review, the fix most teams are buying right now, catches a minority of what a trained human flags and slows the queue further when it is used as a gate.
This book installs the five-part operating model that fixes both mismatches at once. An attack surface ledger gives every model, tool, retrieval source, and agent one owned row with a validation date. A feature tier map sorts every AI feature by data reach, authority, autonomy, exposure, and consequence, so scarce human judgment goes where the blast radius is. A two-lane assurance model runs a deterministic machine lane that blocks every change, a human lane reserved for what a machine cannot judge, and an advisory band that never gates. A ship decision record names the executive who accepted the risk, with evidence current at the release timestamp. And a post-release response ladder runs the product from its first outside vulnerability report through certification, acquisition, and retirement.
Ten supporting instruments round it out: a maturity scorecard, a capacity metric that tells you whether your review team can hold, a component admission standard for models and datasets, a protocol for the vulnerability that has no code fix, a one-page agreement that fits security inside a sprint, and an evidence pack that answers your enterprise customer, your auditor, your regulator, and your acquirer from one source.
Written for the CISO and the director or vice president of product security at any organization that ships AI-enabled products. Every chapter installs one instrument, states its owner and cadence, and closes with the board question you must be able to answer, the evidence that answers it, the failure pattern to watch for, and a thirty-day move you can start this week. No vendor is named anywhere. Every claim carries a citation. The closing chapters sequence your first ninety days so your first fully documented release ships in week twelve.
Your customers have already read Volume VI and learned what evidence to demand. This is how you have the answer ready before they ask.
11 / 4000 bytes外文書商品之書封，為出版社提供之樣本。實際出貨商品，以出版社所提供之現有版本為主。部份書籍，因出版社供應狀況特殊，匯率將依實際狀況做調整。
無庫存之商品，在您完成訂單程序之後，將以空運的方式為你下單調貨。為了縮短等待的時間，建議您將外文書與其他商品分開下單，以獲得最快的取貨速度，平均調貨時間為1~2個月。
為了保護您的權益，「三民網路書店」提供會員七日商品鑑賞期(收到商品為起始日)。
若要辦理退貨，請在商品鑑賞期內寄回，且商品必須是全新狀態與完整包裝(商品、附件、發票、隨貨贈品等)否則恕不接受退貨。
