• Protection starts with risk assessment: figure out what exactly your app is exposed to before building any defense. 2:34
  • Exposure depends on the deployment context: an internal-only application faces a very different risk profile than a public chatbot anyone can interact with. 2:49
  • Once the risks are known, you build protections around them — the video then presents three lines of defense: product design, guardrails, and testing/red-teaming. 2:49