SAIF: A Comprehensive Framework for Evaluating the Risks of Generative AI in the Public Sector
On the map: LLM safety and security → Prompt injection and agent security
Abstract (arXiv)
The rapid adoption of generative AI in the public sector, encompassing diverse applications ranging from automated public assistance to welfare services and immigration processes, highlights its transformative potential while underscoring the pressing need for thorough risk assessments. Despite its growing presence, evaluations of risks associated with AI-driven systems in the public sector remain insufficiently explored. Building upon an established taxonomy of AI risks derived from diverse government policies and corporate guidelines, we investigate the critical risks posed by generative AI in the public sector while extending the scope to account for its multimodal capabilities. In addition, we propose a Systematic dAta generatIon Framework for evaluating the risks of generative AI (SAIF). SAIF involves four key stages: breaking down risks, designing scenarios, applying jailbreak methods, and exploring prompt types. It ensures the systematic and consistent generation of prompt data, facilitating a comprehensive evaluation while providing a solid foundation for mitigating the risks. Furthermore, SAIF is designed to accommodate emerging jailbreak methods and evolving prompt types, thereby enabling effective responses to unforeseen risk scenarios. We believe that this study can play a crucial role in fostering the safe and responsible integration of generative AI into the public sector.
Key facts. Cited by 2 papers in the map (data through 14 Oct 2026). Placed in Prompt injection and agent security, one of 12 directions in LLM safety and security. Builds on 19 of its 41 references that are in the map. First posted on arXiv 15 Jan 2025.
Builds on
19 of 41 references.
References · 19
- 2023LLaMA: Open and Efficient Foundation Language Modelscited by 14,132
- 2022Large Language Models are Zero-Shot Reasonerscited by 4,374
- 2023A Prompt Pattern Catalog to Enhance Prompt Engineering with ChatGPTcited by 619
- 2023DeepInception: Hypnotize Large Language Model to Be Jailbreakercited by 367
- 2023WavCaps: A ChatGPT-Assisted Weakly-Labelled Audio Captioning Dataset for Audio-Language Multimodal Researchcited by 267
- 2023Generating Images with Multimodal Language Modelscited by 260
- 2023The political ideology of conversational AI: Converging evidence on ChatGPT's pro-environmental, left-libertarian orientationcited by 189
- 2024A Comprehensive Study of Jailbreak Attack versus Defense for Large Language Modelscited by 106
- 2023Jailbreaking GPT-4V via Self-Adversarial Attacks with System Promptscited by 65
- 2023InGram: Inductive Knowledge Graph Embedding via Relation Graphscited by 52
- 2024AI Risk Categorization Decoded (AIR 2024): From Government Regulations to Corporate Policiescited by 37
- 2024Risks from Language Models for Automated Mental Healthcare: Ethics and Structure for Implementationcited by 27
7 more
- 2023Representation Learning on Hyper-Relational and Numeric Knowledge Graphs with Transformerscited by 16
- 2024Generative AI is already widespread in the public sectorcited by 10
- 2023Learning Representations of Bi-level Knowledge Graphs for Reasoning beyond Link Predictioncited by 9
- 2024Exfiltration of personal information from ChatGPT via prompt injectioncited by 7
- 2024U Can't Gen This? A Survey of Intellectual Property Protection Methods for Data in Generative AIcited by 7
- 2024Applications of Generative AI in Healthcare: algorithmic, ethical, legal and societal considerationscited by 4
- 2024Toward Safe Evolution of Artificial Intelligence (AI) based Conversational Agents to Support Adolescent Mental and Sexual Health Knowledge Discoverycited by 2
Built on by
Citing papers per year: 2026: 2.
2 papers.
Similar, not cited
Close in wording, no citation either way
- 2025Understanding and Mitigating Risks of Generative AI in Financial Services
- 2023The Gradient of Generative AI Release: Methods and Considerations
- 2024A Safe Harbor for AI Evaluation and Red Teaming
- 2024Mapping the Ethics of Generative AI: A Comprehensive Scoping Review
- 2024A Formal Framework for Assessing and Mitigating Emergent Security Risks in Generative AI Models: Bridging Theory and Dynamic Risk Mitigation
- 2024PyRIT: A Framework for Security Risk Identification and Red Teaming in Generative AI System
- 2025With Great Capabilities Come Great Responsibilities: Introducing the Agentic Risk & Capability Framework for Governing Agentic AI Systems
- 2026Taxonomy-Driven Analysis of Open-Source AI Risk Mitigation Tools