Standard
AI Security and Risk Standard
This standard defines minimum security and risk requirements for AI systems. It is original repository content informed by common AI, cloud, privacy, and security assurance practices and does not reproduce restricted third-party control or questionnaire text.
- Type
- Standard
- Version
- 1.1.9
- Date
- 2026-10-27
- Owner
- AI Security Maintainer
- Approving authority
- Governance Library Maintainer
- Classification
- Public
- Confidentiality
- Public
- Category
- AI Governance
- Review frequency
- 6 to 12 months and upon material AI threat, framework, or regulatory change
- Licence
- CC BY-SA 4.0
Read the full text on GitHub (opens in a new tab)
Outline
- 1. Purpose
- 2. Applicability
- 3. Relationship to the AI and Agentic Development Security Standard
- 4. Minimum requirements
- 5. Evidence requirements
- 6. Compliance notes
- 7. Framework alignment
Frameworks it maps to
- ETSI EN 304 223 V2.1.1 (2025-12)
- ETSI TR 104 128 V1.1.1 (2025-05)
- NIST AI 100-2e2025
- ISO/IEC 42001:2023
- ISO/IEC 27001:2022
- NIST AI RMF 1.0 (2023)
- OWASP LLM Top 10 (2026)
- OWASP AI Exchange
- SANS CAISG v1.4
Related documents
- AI Governance and Risk Frameworkai
- AI System Impact Assessment Procedureai
- AI System Register Templateai
- Privacy and Data Governance Policyprivacy
- Supplier and Cloud Governance Frameworksupply-chain
- AI Risk Registerai
- Ethical AI Use Guidelineai
- Access Control Proceduresecurity
- Identity Management Proceduresecurity
- AI Testing, Validation and Documentation Standardai
- AI Human-Oversight Standardai
Next
All Documents