This chapter focuses on the operational side of AI security and risk management, diving deeper into different types of risks, secure development practices, and risk assessment. We will first examine risks broken down by internal and external risk categories and then learn about practices aimed at mitigating them.