Establish AI security requirements covering data classification and handling, model and agent access, non-human identities, least privilege, prompt-injection defenses, secure retrieval sources, output validation, model and software supply chain risk, audit logging, monitoring, human oversight, and emergency disablement. Design and review secure multi-cloud and hybrid architectures, including cloud identity, privileged access, network segmentation, private connectivity, workload protection, containers, serverless services, data protection, key and secrets management, logging, monitoring, resilience, and recovery.