AI-powered System: Cybersecurity Report Generation and Risk Mitigation

Our client specializes in developing, manufacturing, and distributing healthcare systems, both devices and software, for people with diabetes. Due to the sensitive nature of patient data and the stringent cybersecurity requirements imposed by regulatory bodies, the company prioritizes data protection and maintains rigorous security protocols like HIPAA, FDA, GDPR, etc.

To safeguard information transfer, each product release undergoes multiple cybersecurity checks, from bend testing to code review. Security architects analyze the results—including the vulnerabilities found—collect them into a report for regulatory authorities, and work on risk mitigation strategies.

Since these tasks were manual and inefficient—leading to unnecessary costs and resource allocation—the company decided to streamline and automate the entire process for greater cost-effectiveness and productivity. They asked the NIX team to develop a specialized AI-powered portal capable of generating reports and making smart predictions, ultimately streamlining document flow and assessing product release risks. The client chose us for our proven cybersecurity background and vast experience in healthcare development.  

Our team developed an LLM-based system with a function-driven architecture that automates repetitive documentation tasks and streamlines cybersecurity administrative workflows. Deployed in the Google Cloud Platform (GCP), it utilizes various GCP services, such as Cloud Run and Google Workflows, and fully leverages generative AI capabilities. All data within this solution is encrypted both at rest and in transit, ensuring robust security.

To unite and set up all interconnected operations, we integrated the platform with the necessary enterprise-level systems, including threat modeling tools and the Oracle database as the final storage for reports. This two-way data synchronization ensures the correct extraction and processing of information for generating reports.

System’s Functionality

• Intellectual Report Generation. The system collects information from various sources and converts it into government-level reports for regulatory organizations. It uses Google’s AI engine to check the reports and fill in missing fields, freeing security architects from performing these tasks manually.
• AI-powered Predictions. By leveraging Vertex AI Agent Builder, we designed and deployed conversational agents capable of generating contextually relevant mitigation recommendations directly within the report generation process.
• Smart Search. We also used Vertex AI’s Agent Builder to create a smart search in the company’s documentation, which allows security architects to look for relevant information for report generation and analysis.
• Accuracy Reports. NIX equipped the system with special reports to help the company’s management and security engineers understand how accurate the AI ​​is in its forecasts, further improving its operation.