R4 — The Regulated Enterprise Connector

A regulated enterprise needs its AI connector configured before anyone uses it. Tier deployments by purpose, block restricted data from ineligible endpoints and quota the teams, then hold the policy when the primary deployment fails mid-exercise.

Advanced · Several moving parts — expect trade-offs and a wrong turn or two.

Outcome · Run training through an organization-owned model endpoint with residency, allowlist, quota and audit intact.

Launch the windows desktop Open the workbench only How this is graded

George · 5 lines

Roles

• AI platform administrator

• Security architect

• SOC lead

Standards mapping

NICE T0177, T0473

ATLAS AML.T0012

OWASP LLM03, LLM10

Publish gate

Manifest valid · release 1.0.0

AI connection

This activity runs entirely on the deterministic runtime. Optional live-model runtimes only affect dialog, coaching and wording — never checks or scoring.

Deterministic simulationmode 0

Nothing leaves the browser session.

Chrome built-in AImode 1

Prompts never leave the learner's machine.

Bring your own keymode 2

Lab prompts reach the learner's chosen provider only.

Organization-owned AImode 3

Customer tenancy; Cybrary sees metadata only.

Cybrary-managed AImode 4

Cybrary AI gateway; retention off by default.

Hybrid routingmode 5

Per-job — the router never sends restricted jobs off-tenant.

Lab manifest

The machine-readable release contract. Authors edit this; the console refuses to publish without checks, both regression suites and a reference solve.

schemaVersion: cybrary.ai-lab/v1
id: regulated-enterprise-connector
release: 1.0.0
mode: ai-range
maturity: 4
roles:
  - ai-platform-administrator
  - security-architect
  - soc-lead
outcomes:
  niceTasks:
    - T0177
    - T0473
  atlasTechniques:
    - AML.T0012
  owaspRisks:
    - LLM03
    - LLM10
aiAssets:
  models:
    - support-agent-model@2026.06
  prompts:
    - regulated-enterprise-connector-system-prompt@1
  agents:
    - support-agent-orchestrator@3
  tools:
    - crm.lookup
    - ticket.update
    - email.send
    - refund.issue
  corpora:
    - support-kb@v4
enterpriseTopology: support-enterprise-v3
scenario:
  seed: regulated-enterprise-connector-seed-1
  injects:
    - regulated-enterprise-connector-inject-1
telemetry:
  requiredSignals:
    - ai.trace
    - rag.retrieval
    - tool.call
    - identity.auth
    - dlp.egress
    - siem.alert
evaluation:
  deterministicChecks:
    - regulated-enterprise-connector-checks
  repeatedTrials: 20
  maliciousSuite: regulated-enterprise-connector-attack-v1
  benignSuite: support-utility-v4
safety:
  networkEgress: deny
  maxTokens: 250000
  maxCostUsd: 20