Page 120 - CyberSecurityEssentialsEnglish

TABLE 3-4: MARKET CATEGORIES AND WHAT SHOULD BE EXAMINED

Category When does it help? The decisive question

When you are building an
Which languages, media, limits,
Foundation model application or need control over
version, and license?
the model and its adaptation.

For fast use, file uploads, Which tools does it add, and
Chat application conversation, and individual or how does it handle data, files,

team work. and memory?

When you need a task, a sector, a Is the specialization real and
Specialized tool controlled output, and a ready tested, or just an interface over

workflow. a general model?

For building an internal solution What are the costs of
Platform and API with integration, logging, development, operation, and

monitoring, and permissions. leaving the vendor?

What are the limits of
For multi-step tasks that call tools
Agent permission, approval, stopping,
and may carry out actions.
and logging?

Does the organization have the
For privacy, speed, offline work,
Local or on-device capacity for updates, security,
or control over hosting.
monitoring, and quality?

Closed, Open-Weight, and Open Source
A closed service allows the model to be used through an application or an API without access
to its weights, which are the parameter values the model learned during training and which

determine how it responds to input, and without access to the details of how it was built. An
open-weight model makes those parameter files available under a defined license, which

often permits running or adapting it, but it does not mean that the training data, the training
code, or a description of the build process is available or reproducible.

Open source AI is a broader concept. The Open Source AI Definition 1.0, issued by the Open

Source Initiative, focuses on the freedoms to use, study, modify, and share, together with
access to the preferred form for making modifications and the information needed to do so

[14]. It is therefore not enough for a vendor to say “open”. Read the license and determine
what is actually available and what commercial use, modification, or redistribution it
permits.

119