Precisely. The PPT (People, Process, Technology) framework remains the industry standard because it addresses the systemic dependencies that technical controls alone cannot solve. A secure-by-design infrastructure is often undermined by insecure-by-habit workflows.

Absolutely agree. This is a critical aspect that often doesn’t get enough attention, but it should definitely be taken into account when designing production-ready LLM systems.

I think we are currently still in a "Wild West" phase of reactive patching, but the industry is heading towards a future where robustness against attacks will be a requirement for every production-ready LLM system.