CAICSO study materials
CAICSO study resources

CAICSO case studies

CAICSO · Put your knowledge to work in context.

The CAICSO is a vendor-neutral certification aimed at security and risk professionals who are responsible for securing artificial intelligence systems rather than building models. It suits security architects, GRC analysts, AI/ML engineers moving into security, auditors, and consultants who need to speak credibly about both adversarial machine learning and the governance frameworks around it. The CAICSO case studies are 5 cases and about 4,529 words.

1

Forty-Five Days to Launch: Claims Triage Across Two Regimes

Meridian Health Insurance plans to deploy ClaimAssist, an LLM assistant that summarises medical records and recommends approve / deny / escalate for 1.2 million claims a year across Spain, Ireland, Texas and Ohio. It is a vendor-hosted API model with retrieval over 900 internal policy documents; Meridian does no training or fine-tuning.

992 words, about 5 min
2

Retrieval Without Authorisation: A Clinical Assistant Over 8.4 Million Chunks

Northlake Health has deployed a retrieval-augmented assistant to 3,200 clinicians. Documents come from 14 source systems: EHR notes, scanned PDFs passed through OCR, HR grievance files, complaints and quality reports, and payer contracts.

977 words, about 5 min
3

Three Refunds, $1,340, and a Poisoned Invoice

Ledgerly, a payments fintech, runs a customer-support agent handling 40,000 conversations a day. The agent has four tools: lookup account, issue refund (auto-approved up to $500, five per conversation), send email, and create ticket.

917 words, about 5 min
4

Sixty Models, No Registry, and a Pickle File

Brightline Retail runs 60 production models across fraud, demand forecasting, pricing and recommendations, supported by 4 platform engineers and 22 data scientists. Deployment means exporting a notebook to a shared VM and adding a cron entry.

678 words, about 3 min
5

Eleven Days of Silence: A Fraud Model That Changed Behaviour

Cobalt Bank uses a vendor-supplied real-time fraud scoring model. On a Tuesday the vendor pushes version 4.3 under a "continuous improvement" clause with no notice.

965 words, about 5 min