https://handbook.harmonic.security 1 2026-07-20T13:44:13.457Z https://handbook.harmonic.security/start-here/what-is-ai-security 0.84 2026-07-17T14:15:16.791Z https://handbook.harmonic.security/start-here/how-to-use-this-handbook 0.84 2026-07-20T13:47:53.593Z https://handbook.harmonic.security/start-here/security-team-checklist 0.84 2026-07-07T20:45:13.026Z https://handbook.harmonic.security/start-here/glossary 0.84 2026-07-07T16:48:33.691Z https://handbook.harmonic.security/by-ai-vendor/anthropic 0.84 https://handbook.harmonic.security/by-ai-vendor/anthropic/claude-cowork 0.7 https://handbook.harmonic.security/by-ai-vendor/anthropic/claude-code 0.7 https://handbook.harmonic.security/by-ai-vendor/anthropic/claude-tag 0.7 https://handbook.harmonic.security/by-ai-vendor/openai 0.84 https://handbook.harmonic.security/by-ai-vendor/openai/chatgpt-work 0.7 https://handbook.harmonic.security/by-ai-vendor/openai/chatgpt-codex 0.7 https://handbook.harmonic.security/handbook/1.-identity-and-access 0.84 2026-07-07T20:45:13.027Z https://handbook.harmonic.security/handbook/1.-identity-and-access/1.1-sso-and-scim-for-ai-platforms 0.7 https://handbook.harmonic.security/handbook/1.-identity-and-access/1.2-rbac-across-ai-platforms 0.7 2026-07-08T17:50:55.152Z https://handbook.harmonic.security/handbook/1.-identity-and-access/1.3-tenant-restrictions-blocking-personal-accounts 0.7 2026-07-07T14:15:11.932Z https://handbook.harmonic.security/handbook/1.-identity-and-access/1.4-domain-claiming-bringing-shadow-accounts-into-enterprise 0.7 https://handbook.harmonic.security/handbook/1.-identity-and-access/1.5-agent-and-non-human-identity 0.7 https://handbook.harmonic.security/handbook/1.-identity-and-access/1.6-api-keys-and-service-accounts-governance 0.7 https://handbook.harmonic.security/handbook/1.-identity-and-access/1.7-human-in-the-loop-and-approval-policies 0.7 https://handbook.harmonic.security/handbook/2.-supply-chain-and-extensibility 0.84 2026-07-07T20:45:13.027Z https://handbook.harmonic.security/handbook/2.-supply-chain-and-extensibility/2.1-connectors-and-apps-the-integration-backbone 0.7 https://handbook.harmonic.security/handbook/2.-supply-chain-and-extensibility/2.2-mcp-servers-securing-the-protocol 0.7 https://handbook.harmonic.security/handbook/2.-supply-chain-and-extensibility/2.3-mcp-gateways-and-allowlisting 0.7 https://handbook.harmonic.security/handbook/2.-supply-chain-and-extensibility/2.4-analyzing-skills-for-risk 0.7 https://handbook.harmonic.security/handbook/2.-supply-chain-and-extensibility/2.5-plugins-and-marketplaces 0.7 https://handbook.harmonic.security/handbook/2.-supply-chain-and-extensibility/2.6-ai-hooks-inference-controls-and-lifecycle-automation 0.7 https://handbook.harmonic.security/handbook/2.-supply-chain-and-extensibility/2.7-the-supply-chain-review-workflow 0.7 https://handbook.harmonic.security/handbook/2.-supply-chain-and-extensibility/2.8-signing-and-packaging 0.7 https://handbook.harmonic.security/handbook/2.-supply-chain-and-extensibility/2.9-saas-agent-building-supply-chain 0.7 https://handbook.harmonic.security/handbook/2.-supply-chain-and-extensibility/2.10-hosted-agent-framework-dependencies 0.7 https://handbook.harmonic.security/handbook/3.-runtime-sandbox-and-autonomy 0.84 2026-07-07T20:57:00.803Z https://handbook.harmonic.security/handbook/3.-runtime-sandbox-and-autonomy/3.1-what-even-is-an-ai-sandbox 0.7 https://handbook.harmonic.security/handbook/3.-runtime-sandbox-and-autonomy/3.2-approval-policies-and-least-privilege-autonomy 0.7 https://handbook.harmonic.security/handbook/3.-runtime-sandbox-and-autonomy/3.3-network-egress-control 0.7 https://handbook.harmonic.security/handbook/3.-runtime-sandbox-and-autonomy/3.4-internet-access-and-browser-automation 0.7 2026-07-07T14:22:09.477Z https://handbook.harmonic.security/handbook/3.-runtime-sandbox-and-autonomy/3.5-computer-use-desktop-control-risks 0.7 https://handbook.harmonic.security/handbook/3.-runtime-sandbox-and-autonomy/3.6-scheduled-and-background-tasks 0.7 https://handbook.harmonic.security/handbook/3.-runtime-sandbox-and-autonomy/3.7-remote-access-dispatch-and-ssh 0.7 https://handbook.harmonic.security/handbook/3.-runtime-sandbox-and-autonomy/3.8-file-and-filesystem-access-controls 0.7 https://handbook.harmonic.security/handbook/3.-runtime-sandbox-and-autonomy/3.9-central-hosted-agent-runtime-hardening 0.7 https://handbook.harmonic.security/handbook/4.-data-protection-and-residency 0.84 2026-07-07T20:57:00.802Z https://handbook.harmonic.security/handbook/4.-data-protection-and-residency/4.1-dlp-for-genai 0.7 https://handbook.harmonic.security/handbook/4.-data-protection-and-residency/4.2-data-classification-for-ai-prompts-and-outputs 0.7 https://handbook.harmonic.security/handbook/4.-data-protection-and-residency/4.3-data-residency-and-regional-inference 0.7 2026-07-07T14:33:11.019Z https://handbook.harmonic.security/handbook/4.-data-protection-and-residency/4.4-retention-and-zero-data-retention 0.7 https://handbook.harmonic.security/handbook/4.-data-protection-and-residency/4.5-training-opt-out-and-data-usage 0.7 https://handbook.harmonic.security/handbook/4.-data-protection-and-residency/4.6-cross-app-data-flow-and-live-artifacts 0.7 https://handbook.harmonic.security/handbook/4.-data-protection-and-residency/4.7-secrets-and-credential-hygiene-in-prompts-and-tools 0.7 https://handbook.harmonic.security/handbook/5.-threats-and-adversarial 0.84 2026-07-07T20:57:00.803Z https://handbook.harmonic.security/handbook/5.-threats-and-adversarial/5.1-prompt-injection-the-connective-risk 0.7 https://handbook.harmonic.security/handbook/5.-threats-and-adversarial/5.2-data-exfiltration-via-tools-and-connectors 0.7 https://handbook.harmonic.security/handbook/5.-threats-and-adversarial/5.3-supply-chain-attacks-and-notable-cves 0.7 https://handbook.harmonic.security/handbook/5.-threats-and-adversarial/5.4-agent-specific-threats-tool-poisoning-and-confused-deputy 0.7 https://handbook.harmonic.security/handbook/5.-threats-and-adversarial/5.5-red-teaming-ai-systems 0.7 https://handbook.harmonic.security/handbook/5.-threats-and-adversarial/5.6-incident-response-for-ai-system 0.7 https://handbook.harmonic.security/handbook/5.-threats-and-adversarial/5.7-threat-modeling-ai-systems 0.7 https://handbook.harmonic.security/handbook/6.-observability-audit-and-evidence 0.84 2026-07-07T21:02:49.568Z https://handbook.harmonic.security/handbook/6.-observability-audit-and-evidence/6.1-the-audit-gap-what-you-can-and-cant-see 0.7 https://handbook.harmonic.security/handbook/6.-observability-audit-and-evidence/6.2-opentelemetry-for-ai-runtime-visibility 0.7 https://handbook.harmonic.security/handbook/6.-observability-audit-and-evidence/6.3-compliance-apis-by-platform 0.7 https://handbook.harmonic.security/handbook/6.-observability-audit-and-evidence/6.4-analytics-and-usage-apis 0.7 2026-07-07T14:42:40.712Z https://handbook.harmonic.security/handbook/6.-observability-audit-and-evidence/6.5-routing-ai-telemetry-to-your-siem 0.7 https://handbook.harmonic.security/handbook/6.-observability-audit-and-evidence/6.6-evidence-by-surface-and-investigation-paths 0.7 https://handbook.harmonic.security/handbook/6.-observability-audit-and-evidence/6.7-continuous-review-cadence 0.7 https://handbook.harmonic.security/handbook/7.-rollout-and-operations 0.84 2026-07-07T21:05:34.234Z https://handbook.harmonic.security/handbook/7.-rollout-and-operations/7.1-roll-out-by-risk-the-phased-plan 0.7 https://handbook.harmonic.security/handbook/7.-rollout-and-operations/7.2-pilot-design-and-success-metrics 0.7 https://handbook.harmonic.security/handbook/7.-rollout-and-operations/7.3-the-security-team-checklist 0.7 2026-07-20T01:31:24.904Z https://handbook.harmonic.security/handbook/7.-rollout-and-operations/7.4-the-vendor-neutral-control-matrix 0.7 https://handbook.harmonic.security/reference/governance-and-frameworks 0.84 2026-07-20T21:58:47.550Z https://handbook.harmonic.security/reference/governance-and-frameworks/g.1-map-your-controls-to-nist-ai-rmf-and-csf-2.0 0.7 https://handbook.harmonic.security/reference/governance-and-frameworks/g.2-eu-ai-act-obligations-for-deployers 0.7 https://handbook.harmonic.security/reference/governance-and-frameworks/g.3-dora-and-ai-resilience-in-financial-services 0.7 https://handbook.harmonic.security/reference/governance-and-frameworks/g.4-colorado-ai-act-and-the-us-state-patchwork 0.7 https://handbook.harmonic.security/reference/governance-and-frameworks/g.5-sans-critical-ai-security-guidelines-mapping 0.7 https://handbook.harmonic.security/reference/governance-and-frameworks/g.6-write-an-ai-acceptable-use-policy-that-holds-up 0.7 https://handbook.harmonic.security/reference/governance-and-frameworks/g.7-ownership-and-raci-for-ai-security 0.7 https://handbook.harmonic.security/reference/governance-and-frameworks/g.8-iso-iec-42001-ai-management-system 0.7 2026-07-07T16:28:20.756Z https://handbook.harmonic.security/reference/governance-and-frameworks/g.9-hipaa-controls-for-ai-systems-handling-phi 0.7