In the context of AI security, what should a postmortem review identify as areas for improvement?

• A. Data preprocessing, security controls, and adversarial testing.
• B. Marketing outreach and product launch strategy.
• C. Hardware procurement efficiency.
• D. User interface color scheme improvements.

Answer: (A)

After an AI security incident, the postmortem should pinpoint actionable improvements that directly strengthen defenses in three areas: how data is handled, how security controls are applied, and how the system is tested against adversarial threats. Focusing on data preprocessing matters because data quality and integrity underpin model behavior and security. Improving data pipelines includes validating data at ingestion, enforcing data provenance and versioning, detecting anomalies, and guarding against poisoning or leakage. These steps reduce the chance that bad data or manipulated inputs can compromise the model or reveal sensitive information.

Security controls are the frontline for preventing, detecting, and containing breaches. A thorough postmortem examines whether access is properly restricted, credentials and secrets are managed securely, and encryption is used where appropriate. It also looks at the software supply chain, patch management, logging and monitoring, and incident response procedures. The goal is to close gaps that attackers could exploit, improve detection capabilities, and ensure rapid containment and recovery when incidents occur.

Adversarial testing is essential to reveal weaknesses that standard testing might miss. This means conducting red-team exercises, probing with adversarial examples, testing for data poisoning risks, and evaluating privacy risks like membership inference. The findings guide concrete safeguards, such as model hardening, input sanitization, robust training methods, and deployment guardrails, all integrated into a continuous improvement cycle.

These areas are the best fit because they directly impact an AI system’s security posture and are actionable for preventing recurrence. Choices focusing on marketing strategy, hardware procurement, or user interface color schemes don’t address the security vulnerabilities or incident response capabilities central to a postmortem.