SK shieldus will strengthen its zero-trust–based AI security business to respond to security threats stemming from the spread of artificial intelligence (AI) agents. Zero trust is a security principle that "always verifies and grants only the minimum privileges."
SK shieldus said on the 19th it will offer AI security consulting services based on "SKZT (SK shieldus Zero Trust)," its proprietary zero-trust methodology.
Recently, on-site at corporations, the use of AI is rapidly shifting beyond assisting work to the stage where AI actually performs tasks. As a result, AI has emerged as a new non-human identity that accesses corporate systems and data to handle work. If the management system for non-human identities is inadequate, it can lead to new security risks such as excessive privilege grants, leaks of sensitive information, and system misuse, making it necessary to apply verification and controls at the same level as for people.
That is why zero trust, a security model that does not inherently trust users, devices, or systems and continuously verifies identity and privileges for every access request, has drawn attention recently.
SKZT is a consulting framework that identifies key protection targets—such as users, devices, networks, systems, applications, and data—assesses security levels, and supports the establishment of mid- to long-term road maps. SK shieldus is extending this into AI environments to raise the security level of corporations that use AI.
SK shieldus will examine AI operating environments to assess which systems and data AI accesses and whether privileges are granted appropriately, and will support customers in building AI governance and security systems.
It also reflects global standards such as the U.S. National Institute of Standards and Technology's (NIST) AI Risk Management Framework (AI RMF), the U.S. Department of Defense's (DoD) Responsible AI guidelines (RAI), and the international AI management system standard "ISO/IEC 42001."
SK shieldus plans to expand its zero-trust–based AI security business across various industries, including finance, manufacturing, and the public sector.
A SK shieldus official said, "As AI has taken root as an agent that actually performs work, beyond a simple work-support tool, the targets of security management are expanding from being people-centered to including AI," and added, "SK shieldus will support the entire process—from establishing governance to building and operating security systems—so customers can use AI safely."