Skip to content
AI Security

Interview question · Security Foundations & Threat Modeling

Explain an AI security risk to a CISO: the impact, the options, the residual risk and the decision you need.

Five minutes, no jargon, one decision. Candidates who explain how attention works have already lost the room.

mediumEssentialNewPreparation tags: JPMorgan Chase, Microsoft, GoogleUpdated Nov 2026

Five minutes, no jargon, one decision. Candidates who explain how attention works have already lost the room.

Make your first attempt

What would you say before reading the answer?

  1. 01 State the assumptions your answer depends on.
  2. 02 Explain the mechanism and choose a control.
  3. 03 Name a condition that would change your decision.

The worked answer includes an approach, scoring criteria and follow-up questions. Compare the reasoning with your own.

signing in unlocks more free answers per topic

What if · the follow-ups in this answer

The answer works through 6 follow-ups like an interviewer would

You must brief the CISO on prompt injection risk in a new email assistant before launch, in ten minutes.

  1. What do you lead with?
  2. How do you state the risk?
  3. What options would you present?
  4. How do you handle 'can we just filter it out'?
  5. How do you close?
  6. How would you structure the briefing?

Each rung has a nudge, a model answer, the principle that carries over and the weak answer to avoid. Sign in free to open it.

UP NEXT ON YOUR JOURNEY
Next in this trackWalk through the incident response lifecycle using a leaked API key as the example.Next in this trackThreat-model a password-reset flow.Next in this trackHow do attack trees and kill chains help in threat modelling, and where do they mislead?
DISCUSSION · 0

No comments yet. Share a correction or a different way to answer it.