Alignment of clerical and configuration security policy using artificial intelligence (AI)

A system comprising:

• a memory;
• and
• a processing device, operatively coupled to the memory, to:
• retrieve a clerical-based security policy and a configuration-based security policy associated with a network, wherein the clerical-based security policy corresponds to the configuration-based security policy;
• generate a conversion prompt comprising an indication of a security component of a plurality of security components, wherein the security component implements specific rules associated with the configuration-based security policy, and wherein each security component of the plurality of security components implements particular rules associated with different configuration-based security policies;
• prompt, using the conversion prompt, a generative artificial intelligence (AI) model including a request to translate the configuration-based security policy from a structured data format to a plain text description, wherein the plain text description describes an application of the configuration-based security policy to a network device;
• generate a comparison prompt to the AI model, the comparison prompt comprising a request to compare the clerical-based security policy and the plain text description of the configuration-based security policy;
• provide the comparison prompt to the generative AI model;
• receive a response to the comparison prompt from the generative AI model, the response comprising indications of discrepancies between the clerical-based security policy and the configuration-based security policy, and further comprising operations to align policies;
• provide the indications of the discrepancies on a user interface of a client device;
• and
• align the configuration-based security policy with the clerical-based security policy based on the indications of discrepancies and according to the operations in the response such that the clerical-based security policy matches the configuration-based security policy.

A non-transitory computer readable storage medium including instructions that, when executed by a processing device, cause the processing device to:

• retrieve, by the processing device, a clerical-based security policy and a configuration-based security policy associated with a network, wherein the clerical-based security policy corresponds to the configuration-based security policy;
• generate, by the processing device, a conversion prompt comprising an indication of a security component of a plurality of security components, wherein the security component implements specific rules associated with the configuration-based security policy, and wherein each security component of the plurality of security components implements particular rules associated with different configuration-based security policies;
• prompt, using the conversion prompt, a generative artificial intelligence (AI) model to translate the configuration-based security policy from a structured data format to a plain text description, wherein the plain text description describes an application of the configuration-based security policy to a network device;
• generate, by the processing device, a comparison prompt to the AI model, the comparison prompt comprising a request to compare the clerical-based security policy and the plain text description of the configuration-based security policy;
• provide the comparison prompt to the generative AI model;
• receive a response to the comparison prompt from the generative AI model, the response comprising indications of discrepancies between the clerical-based security policy and the configuration-based security policy, and further comprising operations to align policies;
• provide the indications of the discrepancies on a user interface of a client device;
• and
• align the configuration-based security policy with the clerical-based security policy based on the indications of discrepancies and according to the operations in the response such that the clerical-based security policy matches the configuration-based security policy.