A risk team is assessing the AI supply chain risks of procuring a pre-trained foundation model from an open-source repository. Which risk is MOST difficult to mitigate after the model has been integrated into a production system?
Select an answer to reveal the explanation.
Short Explanation and Infographic
Here's the deal — b is correct because a backdoor implanted during pre-training — where the model behaves normally except when a specific trigger input activates malicious behavior — is extremely difficult to detect after integration because it requires either full retraining or specialized backdoor detection techniques on the model weights. A can be addressed through legal review.
Full explanation below image
Full Explanation
B is correct because a backdoor implanted during pre-training — where the model behaves normally except when a specific trigger input activates malicious behavior — is extremely difficult to detect after integration because it requires either full retraining or specialized backdoor detection techniques on the model weights. A can be addressed through legal review. C is a documentation gap. D is a technical integration issue that can be resolved during integration testing.