What is the purpose of Acceptable Use Policies (AUPs) in AI security?

• A. To establish approved and unauthorized uses of AI and ensure employees receive appropriate training.
• B. To dictate only external use of AI tools.
• C. To describe software licensing terms.
• D. To regulate hardware procurement.

Answer: (A)

Acceptable Use Policies in AI security establish what uses of AI are allowed and which are not within an organization, and they typically require training so employees understand risks and responsibilities. This helps prevent data leakage, privacy breaches, unauthorized access, and compliance violations when using AI tools. The policy sets expectations for who can access AI, what data can be input, how outputs can be used, and how incidents are handled, often including monitoring and enforcement. Training embedded in the policy ensures people recognize risks like sharing confidential information with external AI services, relying on untrusted sources, or introducing bias, and know the proper steps to take when issues arise. This is broader and more practical than simply describing licensing terms or hardware procurement, and it isn’t limited to external use only.