{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,9,23]],"date-time":"2026-09-23T06:02:22Z","timestamp":1790143342239,"version":"4.0.1"},"reference-count":48,"publisher":"IEEE","license":[{"start":{"date-parts":[[2026,3,1]],"date-time":"2026-03-01T00:00:00Z","timestamp":1772323200000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/ieeexplore.ieee.org\/Xplorehelp\/downloads\/license-information\/IEEE.html"},{"start":{"date-parts":[[2026,3,1]],"date-time":"2026-03-01T00:00:00Z","timestamp":1772323200000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-029"},{"start":{"date-parts":[[2026,3,1]],"date-time":"2026-03-01T00:00:00Z","timestamp":1772323200000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-037"}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2026,3]]},"DOI":"10.1109\/satml68715.2026.00016","type":"proceedings-article","created":{"date-parts":[[2026,9,22]],"date-time":"2026-09-22T19:06:09Z","timestamp":1790103969000},"page":"119-138","source":"Crossref","is-referenced-by-count":0,"title":["\"Org-Wide, We\u2019re Not Ready\": C-Level Lessons on Securing Generative AI Systems"],"prefix":"10.1109","author":[{"given":"Elnaz","family":"Rabieinejad","sequence":"first","affiliation":[{"name":"University of Guelph","place":["Guelph, Canada"]}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Ali","family":"Dehghantanha","sequence":"additional","affiliation":[{"name":"University of Guelph","place":["Guelph, Canada"]}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Fattane","family":"Zarrinkalam","sequence":"additional","affiliation":[{"name":"University of Guelph","place":["Guelph, Canada"]}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"263","reference":[{"key":"ref1","article-title":"Companies using ai: Stats and examples","author":"Topics","year":"2024"},{"key":"ref2","article-title":"Idc forecasts spending on genai solutions will reach $143 billion in 2027","year":"2023"},{"key":"ref3","article-title":"Enterprises\u2019 top emerging risk in q3 2024","year":"2024"},{"key":"ref4","doi-asserted-by":"publisher","DOI":"10.3390\/bdcc9060147"},{"key":"ref5","first-page":"1831","article-title":"Formalizing and benchmarking prompt injection attacks and defenses","volume-title":"Proceedings of the 33rd USENIX Security Symposium (USENIX Security 2024)","author":"Liu"},{"key":"ref6","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2024.24188"},{"key":"ref7","first-page":"4675","article-title":"Don\u2019t listen to me: Understanding and exploring jailbreak prompts of large language models","volume-title":"Proceedings of the 33rd USENIX Security Symposium (USENIX Security 2024)","author":"Yu"},{"key":"ref8","doi-asserted-by":"publisher","DOI":"10.1145\/3658644.3670388"},{"key":"ref9","doi-asserted-by":"publisher","DOI":"10.14722\/aiscc.2024.23018"},{"key":"ref10","article-title":"Extracting training data from diffusion models","volume-title":"Proceedings of the 32nd USENIX Security Symposium (USENIX Security 2023)","author":"Carlini"},{"key":"ref11","article-title":"Evaluating large language models\u2019 capability to launch fully automated spear phishing campaigns: Validated on human subjects","author":"Heiding","year":"2024"},{"key":"ref12","article-title":"Large language model lateral spear phishing: A comparative study in large-scale organizational settings","author":"Bethany","year":"2024"},{"key":"ref13","doi-asserted-by":"publisher","DOI":"10.1016\/j.hcc.2024.100211"},{"key":"ref14","doi-asserted-by":"publisher","DOI":"10.1145\/3712001"},{"key":"ref15","doi-asserted-by":"publisher","DOI":"10.1016\/j.dim.2023.100063"},{"key":"ref16","doi-asserted-by":"publisher","DOI":"10.1016\/j.jisa.2024.103960"},{"key":"ref17","doi-asserted-by":"publisher","DOI":"10.1093\/polsoc\/puaf001"},{"key":"ref18","doi-asserted-by":"publisher","DOI":"10.1136\/jech.2004.028662"},{"key":"ref19","doi-asserted-by":"publisher","DOI":"10.1109\/MSP.2016.57"},{"key":"ref20","doi-asserted-by":"publisher","DOI":"10.1145\/3498891.3498895"},{"key":"ref21","doi-asserted-by":"publisher","DOI":"10.1109\/SP46215.2023.10179321"},{"key":"ref22","first-page":"457","article-title":"i have a narrow thought process\u201d: Constraints on explanations connecting inferences and {Self-Perceptions}","volume-title":"Sixteenth Symposium on Usable Privacy and Security (SOUPS 2020)","author":"Rader"},{"key":"ref23","doi-asserted-by":"publisher","DOI":"10.1007\/s10488-013-0528-y"},{"key":"ref24","doi-asserted-by":"publisher","DOI":"10.1177\/1525822X05279903"},{"key":"ref25","doi-asserted-by":"publisher","DOI":"10.1177\/1049732316665344"},{"key":"ref26","doi-asserted-by":"publisher","DOI":"10.1191\/1478088706qp0630a"},{"key":"ref27","doi-asserted-by":"publisher","DOI":"10.4135\/9781529719000"},{"key":"ref28","doi-asserted-by":"publisher","DOI":"10.2307\/2529310"},{"key":"ref29","doi-asserted-by":"publisher","DOI":"10.1177\/001316446002000104"},{"key":"ref30","article-title":"The nist cybersecurity framework (csf) 2.0","year":"2024","journal-title":"tech. rep., U.S. Department of Commerce"},{"key":"ref31","volume-title":"CMMI for Development, Version 1.3.","author":"Chrissis","year":"2011"},{"key":"ref32","article-title":"Security engineering framework (sef): managing security and resilience risks across the systems lifecycle","author":"Alberts","year":"2024","journal-title":"Pittsburgh, PA, USA: CERT Division"},{"key":"ref33","article-title":"Iso\/iec 42001:2023 \u2014 artificial intelligence \u2014 management system","year":"2023"},{"key":"ref34","article-title":"Owasp top 10 for large language model applications (latest version)","author":"Foundation","journal-title":"2025. Project page with current guidance."},{"key":"ref35","article-title":"Artificial intelligence risk management framework: Generative artificial intelligence profile","volume-title":"Tech. Rep. NIST AI 600-1","year":"2024"},{"key":"ref36","article-title":"Guidelines for secure ai system development","year":"2023"},{"key":"ref37","article-title":"Openai red teaming network","year":"2024","journal-title":"Overview of the external red teaming program."},{"key":"ref38","article-title":"Artificial intelligence risk management framework (ai rmf 1.0)","year":"2023","journal-title":"Tech. Rep. NIST AI 100-1, U.S. Department of Commerce"},{"key":"ref39","article-title":"Retrieval-augmented generation for knowledge-intensive nlp","author":"Lewis","year":"2020","journal-title":"Advances in Neural Information Processing Systems (NeurIPS)"},{"key":"ref40","doi-asserted-by":"publisher","DOI":"10.18653\/v1\/2023.emnlp-main.557"},{"key":"ref41","doi-asserted-by":"publisher","DOI":"10.18653\/v1\/2024.findings-acl.212"},{"key":"ref42","article-title":"Language models (mostly) know what they know","author":"Kadavath","year":"2022"},{"key":"ref43","article-title":"Rag and roll: An end-to-end evaluation of indirect prompt manipulations in LLM-based application frameworks","author":"Stefano","year":"2024"},{"key":"ref44","article-title":"Towards more robust retrieval-augmented generation: Evaluating RAG under adversarial poisoning attacks","author":"Su","year":"2024"},{"key":"ref45","article-title":"Audio deepfake detection: A survey","author":"Yi","year":"2023"},{"key":"ref46","article-title":"Audio anti-spoofing detection: A survey","author":"Li","year":"2024"},{"key":"ref47","doi-asserted-by":"publisher","DOI":"10.63583\/dgjbzj25"},{"key":"ref48","article-title":"Securing AI ecosystems: The critical role of AI bills of materials (AIBOM) in mitigating software supply chain risks","year":"2024"}],"event":{"name":"2026 IEEE Conference on Secure and Trustworthy Machine Learning (SaTML)","location":"Munich, Germany","start":{"date-parts":[[2026,3,23]]},"end":{"date-parts":[[2026,3,25]]}},"container-title":["2026 IEEE Conference on Secure and Trustworthy Machine Learning (SaTML)"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx8\/11691582\/11691603\/11691853.pdf?arnumber=11691853","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2026,9,23]],"date-time":"2026-09-23T05:18:38Z","timestamp":1790140718000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/11691853\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2026,3]]},"references-count":48,"URL":"https:\/\/doi.org\/10.1109\/satml68715.2026.00016","relation":{},"subject":[],"published":{"date-parts":[[2026,3]]}}}