Stanford sets new security rules for autonomous AI agents | ETIH EdTech News

Stanford University has developed a new security framework for AI systems used across research, teaching, healthcare and administration, with a particular focus on a growing challenge for institutions: AI that can do things, not simply generate answers.

The Stanford AI Security Framework (AISF) assesses systems according to factors including data sensitivity, autonomy, access to tools and the potential consequences of an action. It combines AIUC-1 with established approaches including ISO 42001, the NIST AI Risk Management Framework, the EU AI Act and OWASP’s AI Vulnerability Scoring System.

For universities, the problem is becoming more complex as AI capabilities appear inside both new tools and existing software. Some systems may only summarize information. Others can modify records, send communications or take actions through connected systems.

Amy Steagall, Chief Information Security Officer at Stanford University, says the aim is to let people use AI without turning the security process itself into an obstacle:

“The genie is out of the bottle, AI has a critical role to play in our research and education now, and in the future. My goal was to make the easy path the safest path focusing our deepest reviews on the systems that really need it.”