Skip to main content Search content Microsoft Digital Customer Zero Office of the CISO AI and Copilot Business applications Cloud platform Data and analytics Developer and automation Modern work Security and governance IT Careers About us Microsoft Security Azure Dynamics 365 Microsoft 365 Microsoft Teams Windows 365 Microsoft AI Azure Space Mixed reality Microsoft HoloLens Microsoft Viva Quantum computing Sustainability Education Automotive Financial services Government Healthcare Manufacturing Retail Find a partner Become a partner Partner Network Microsoft Marketplace Software companies Blog Microsoft Advertising Developer Center Documentation Events Licensing Microsoft Learn Microsoft Research View Sitemap
Craig Nelson, CVP of red teaming at Microsoft, explains what full stack red teaming is and why it is important for preparing to secure AI systems.

Microsoft CISO advice: Securing AI with full stack red teaming

At Microsoft, we approach security for AI systems holistically using a full stack red teaming that goes beyond just testing an AI model.

Corporate Vice President of red teaming at Microsoft Craig Nelson describes what he looks for with this method, “I’m interested in the model, but I’m also interested in how that model connects with underlying additional data. And then how that model also executes automation from the back end.”

In this video, Nelson explains why securing AI requires more than testing the model alone.

Watch this video to see Craig Nelson describe how Microsoft approaches full stack red teaming. (For a transcript, please view the video on YouTube: https://www.youtube.com/watch?v=68MmP084rXA.)

Key takeaways

When you apply full stack red teaming to AI, here are some key questions to answer:

  • How are AI models connecting to data sources?
  • What backend automation do we allow AI to execute?
  • What security credentials do we require?
  • Do we have logs you need to understand how the model works with our backend infrastructure?