How to meet it
OWASP AISVS v1.01
Monitoring, Logging & Anomaly Detection · Proactive Security Behavior Monitoring
Assess risk before autonomous actions
Verify that autonomous action triggers include proactive behavior-pattern analysis, security evaluation, and threat-landscape assessment.
OWASP AISVS v1.01, requirement 12.4.1
In plain English
Before an agent acts on its own initiative, check the action against known behaviour patterns, security rules and current threats.
What good looks like
- Self-initiated actions go through a security evaluation first.
- The evaluation considers the agent's recent behaviour.
- Results are logged.
How teams usually do it
- A pre-action check in the orchestrator that combines policy rules and behaviour analysis.
Evidence an auditor would accept
- The check's configuration and logs.
Common mistakes
- Applying checks to user-requested actions but not to scheduled or self-initiated ones.
Not sure which requirements apply to your system? Take the assessment.
Requirement text from the OWASP AI Security Verification Standard, licensed under CC BY-SA 4.0. This guidance is shared under the same licence.