Generative AI models are capable of performing a wide range of tasks that
traditionally require creativity and human understanding. They learn patterns
from existing data during training and can subsequently generate new content
such as texts, images, and music that follow these patterns. Due to their
versatility and generally high-quality results, they, on the one hand,
represent an opportunity for digitalization. On the other hand, the use of
generative AI models introduces novel IT security risks that need to be
considered for a comprehensive analysis of the threat landscape in relation to
IT security. In response to this risk potential, companies or authorities using
them should conduct an individual risk analysis before integrating generative
AI into their workflows. The same applies to developers and operators, as many
risks in the context of generative AI have to be taken into account at the time
of development or can only be influenced by the operating company. Based on
this, existing security measures can be adjusted, and additional measures can
be taken.

生成式 AI 模型的应用带来了数字化机会，同时也引入了新的 IT 安全风险。在将生成式 AI 集成到工作流程中之前，公司、机构、开发者和操作员都应进行风险分析，并相应地调整和采取安全措施。