69 / 70 · 07 Security Testing for AI Apps · Building a Comprehensive AI Security Testing Program← prev⊞ allnext →☰ Read as one page
11.6Budget and Staffing
| Activity | Estimated Effort | Frequency |
|---|---|---|
| Initial SAST/SCA setup | 1-2 days | One-time |
| Injection/jailbreak test suite | 3-5 days initial, 1 day/month maintenance | Initial + monthly |
| Production monitoring setup | 2-3 days | One-time |
| Red team exercise | 5-10 person-days | Quarterly |
| Threat model review | 2-4 hours per feature | Per feature change |
| Compliance test suite | 3-5 days initial | Initial + per regulation change |
| Security metrics review | 2 hours | Monthly |