Role-Based Playbooks
Persona-specific guidance for developers, researchers, security engineering and vendor evaluation.
For work in the GCC, the GCC AI Compliance section has four further role guides: for practitioners, product companies, auditors and implementors. The EU AI Compliance section has the same four guides for work under EU rules.
Pages in This Section
AI Product Developer PlaybookProvide role-specific guidance focused on secure AI design, RAG security, prompt injection prevention, output filtering, data…
AI Security Researcher PlaybookProvide role-specific guidance focused on AI threat categories, model security, AI supply chain, agentic AI, prompt…
Security Engineering PlaybookProvide role-specific guidance focused on control evaluation, telemetry validation, integration requirements and…
Vendor Evaluation and Audit PlaybookProvide role-specific guidance focused on vendor intake, PoC execution, scoring, evidence collection, control…