Knowledge Base Regulation Tracker Standards & Frameworks OSS Directory AI Incident Database Research Paper Library Case Studies Society Articles News Jobs About Charter Sign inBecome a Member
Home/Standards & Frameworks/CSA AI Controls Matrix (AICM)

CSA AI Controls Matrix (AICM)

Cloud Security Alliance framework of 243 controls across 18 domains for trustworthy AI, with mappings to ISO/IEC 42001, ISO/IEC 27001, NIST AI RMF and the EU AI Act

A vendor-neutral control catalogue for AI security and governance structured like the Cloud Controls Matrix, with implementation guidance, an assessment questionnaire (AI-CAIQ) and cross-references to ISO/IEC 42001, NIST AI RMF and the AI Act, forming the basis of the STAR for AI assurance programme.

aicmcontrolscsastar

Contribute

Spot an error, or know a record we should add? Members can propose additions and submit corrections.

Add standardReport a correction or request removal

Related in Standards & Frameworks

CSA AI Controls Matrix

A control framework for AI in cloud and enterprise environments that extends the Cloud Controls Matrix with AI-specific objectives, from model security and supply chain to threat and vulnerability management.

Cloud Security AlliancePublished

CSA MAESTRO

The threat modelling framework built for agentic AI, which decomposes an agent system into seven layers and models the attacks that emerge within and between them.

Cloud Security AlliancePublished

CSA MAESTRO — Agentic AI Threat Modeling Framework

A layered reference architecture (foundation models, data operations, agent frameworks, deployment, evaluation, security and compliance, agent ecosystem) with threats and mitigations per layer, designed for threat…

Cloud Security AlliancePublished