Curriculum · Phase 7 · Module 7.3

Prompt Injection + Defenses

Prompt injection is the #1 risk on the OWASP LLM Top 10 and the AI-specific attack a GRC engineer will be asked about first. This module covers how it works — direct injection (instruction override, jailbreaks, prompt leaking) and the more dangerous indirect kind, where the payload is planted in a document, web page, or email the model reads — and then the defenses. There is no single fix, so the defense is layered: input validation, system-prompt hardening, output filtering, tool sandboxing, and treating retrieved content as untrusted. You finish by designing the defense-in-depth for a real LLM customer-support bot, mapping each attack to the controls that stop it.