Concept  ·  Glossary

Retrieval-Augmented Generation (RAG)

A technique where an AI, before answering a question, first searches a company's own knowledge base or documents to find relevant facts, then uses those facts to write its answer. This allows the AI to give up-to-date, company-specific answers without needing to be retrained. The 'retrieval' step fetches relevant text; the 'generation' step writes the response.
RAG is the dominant architecture for enterprise AI assistants that answer questions from internal documents, policies, or databases. If the underlying knowledge store is tampered with or injected with malicious content, every answer the AI generates could be compromised.
References
NIST AI Risk Management Framework
Track this in the live feed See how this plays out in real AI security and governance developments.
Open the feed →