To prevent prompt/interface injection, AAISM prioritizes preventive technical controls at the boundary:
input validation/sanitization, structured templates/system prompts, allow/deny lists, and context isolation. These measures constrain user-supplied content and block adversarial instructions from being interpreted as system directives. Monitoring (A) and audits (D) are detective/assurance activities; manual output review (B) is compensating but less scalable and does not prevent injection.
References: AI Security Management (AAISM) Body of Knowledge - Secure Prompting & Input Controls; Interface Injection Mitigations; Context and Instruction Isolation Patterns.