# 12. Data and AI platform

[Catalog](https://mathborgess.github.io/ai-security-wiki/wiki/index.md) · [Audit workflow](https://mathborgess.github.io/ai-security-wiki/wiki/methodology.md)

- [DASF-R-12.1](https://mathborgess.github.io/ai-security-wiki/wiki/risks/12.1.md) — Lack of vulnerability management
- [DASF-R-12.2](https://mathborgess.github.io/ai-security-wiki/wiki/risks/12.2.md) — Lack of penetration testing, red teaming and bug bounty
- [DASF-R-12.3](https://mathborgess.github.io/ai-security-wiki/wiki/risks/12.3.md) — Lack of incident response
- [DASF-R-12.4](https://mathborgess.github.io/ai-security-wiki/wiki/risks/12.4.md) — Unauthorized privileged access
- [DASF-R-12.5](https://mathborgess.github.io/ai-security-wiki/wiki/risks/12.5.md) — Poor security in the software development lifecycle
- [DASF-R-12.6](https://mathborgess.github.io/ai-security-wiki/wiki/risks/12.6.md) — Lack of compliance
- [DASF-R-12.7](https://mathborgess.github.io/ai-security-wiki/wiki/risks/12.7.md) — Initial Access