AI Security Wiki

Nachiket Sathaye and Ankush Jain published version 2.60 of the AI Security Wiki on 7 November 2026, an open, vendor-neutral reference architecture and governance resource released under CC BY-SA 4.0. The wiki spans 252 pages and includes 682 AI security test cases, 46 control objectives, 55 register risks, 13 regional compliance sections and 23 framework crosswalks, with source Markdown hosted at github.com/nachi065/AI-Security-Wiki. The release adds GCC and EU AI compliance hubs, each with 12 fill-in templates, alongside domain standards for agentic AI, MCP and RAG testing.

Document Type: Enterprise AI Security Reference Architecture and Governance Wiki Version: 2.60 Status: Published Original Author: Nachiket Sathaye about the author 22-about-the-author Co-Author: Ankush Jain about the co-author 23-about-the-co-author Intended Use: Public, vendor-neutral reference and template set for AI security governance, engineering, risk management, assurance, audit, compliance, and vendor evaluation. Source Repository: github.com/nachi065/AI-Security-Wiki https://github.com/nachi065/AI-Security-Wiki : the Markdown source, the change history, issues and pull requests. See Contributing https://github.com/nachi065/AI-Security-Wiki/blob/main/CONTRIBUTING.md to suggest a change. What's new: 7 November 2026 Versions 2.59 to 2.60; the full version history 09 Reference/19 Update Notes.html full-version-history summarises each. See the Update Notes 09 Reference/19 Update Notes.html for what was checked and what is still open. Open · Vendor-neutral · CC BY-SA 4.0 https://creativecommons.org/licenses/by-sa/4.0/ AI Security Wiki Open, vendor-neutral AI security wiki: governance, risk, security controls, agentic AI standards, vendor evaluation, regional compliance and 682 test cases. 682 Test Cases 46 Control Objectives 55 Register Risks 13 Regional Sections 23 Framework Crosswalks 252 Pages Explore the Wiki FoundationsAI security vs. security of AI: a practitioner research paper separating the terms, with a two-axis model, design principle, reference architecture and cited sources.15 Pages 00 Foundations/index.html Strategy and MarketAI security market and technology landscape: product categories, threat trends, frameworks such as NIST AI RMF, OWASP LLM Top 10 and MITRE ATLAS.2 Pages 01 Strategy and Market/index.html Risk ManagementAI risk management resources: risk methodology, sample enterprise AI risk register, treatment plan, risk-to-control mapping and review template.7 Pages 02 Risk Management/index.html Control LibraryAI security control library: 46 control objectives in 11 families with evidence, audit tests and framework mappings, plus a baseline and Microsoft gap analysis.4 Pages 03 Control Library/index.html Domain StandardsAI security standards for browser AI, AI coding assistants and coding agents, custom LLM applications, agentic AI and tool governance, sovereignty and data residency, sector overlays, a comparison of financial regulators, and monitoring and adversarial ML for predictive models.8 Pages 04 Domain Standards/index.html Vendor EvaluationAI security vendor evaluation: a vendor-neutral scoring framework, evaluation domains and PoC evidence requirements.1 Page 05 Vendor Evaluation/index.html Testing and AssuranceAI security testing and assurance: PoC test cases, AI red team playbook and an audit and evidence checklist for AI systems.3 Pages 06 Testing and Assurance/index.html Role-Based PlaybooksRole-based AI security playbooks for product developers, security researchers, security engineers, and vendor evaluation and audit teams.4 Pages 07 Role Based Playbooks/index.html GovernanceAI governance operating model, AI policy and standards hierarchy, and acceptable use rules for generative AI in the enterprise.3 Pages 08 Governance/index.html Test Case Library682 AI security test cases for vendor evaluation and PoC across 17 AI lifecycle layers and 6 emerging domains: prompt injection, DLP, agents, MCP, RAG.29 Pages 10 Test Case Library/index.html GCC AI ComplianceGCC AI compliance resources: regulatory hub for UAE, Saudi Arabia, Qatar, Bahrain and Oman, role guides, 12 fill-in templates and a control crosswalk.20 Pages 11 GCC AI Compliance/index.html EU AI ComplianceEU AI compliance resources: AI Act timeline and regulatory hub, role guides, 12 fill-in templates, control drivers and a crosswalk.20 Pages 12 EU AI Compliance/index.html Australia AI ComplianceAustralia AI compliance resources: regulatory hub covering the Privacy Act automated-decision changes, a role guide, two templates and a crosswalk.5 Pages 13 Australia AI Compliance/index.html Brazil AI ComplianceBrazil AI compliance resources: regulatory hub covering the LGPD and the pending AI bill PL 2338/2023, a role guide, two templates and a crosswalk.5 Pages 14 Brazil AI Compliance/index.html Canada AI ComplianceCanada AI compliance resources: regulatory hub covering PIPEDA, Quebec Law 25, the federal automated decision directive and OSFI E-23, a role guide and three templates.6 Pages 15 Canada AI Compliance/index.html China AI ComplianceChina AI compliance resources: regulatory hub covering generative AI, algorithm, deep synthesis, labelling and ethics review measures, a role guide and three templates.6 Pages 16 China AI Compliance/index.html India AI ComplianceIndia AI compliance resources: regulatory hub covering the DPDP Act and Rules, MeitY guidelines, RBI, SEBI, IRDAI and CERT-In, a role guide, three templates and tested code for DPDP privacy duties.6 Pages 17 India AI Compliance/index.html Japan AI ComplianceJapan AI compliance resources: regulatory hub covering the AI Promotion Act, the Guidelines for AI Business, the APPI and copyright law, a role guide and two templates.5 Pages 18 Japan AI Compliance/index.html Singapore AI ComplianceSingapore AI compliance resources: regulatory hub covering IMDA frameworks, AI Verify, the PDPA, MAS and CSA guidance, a role guide and three templates.6 Pages 19 Singapore AI Compliance/index.html South Korea AI ComplianceSouth Korea AI compliance resources: regulatory hub covering the AI Basic Act in force since January 2026, a role guide, three templates and a crosswalk.6 Pages 20 South Korea AI Compliance/index.html UK AI ComplianceUK AI compliance resources: regulatory hub covering UK GDPR, the Data Use and Access Act 2025, ICO, FCA and PRA expectations, a role guide and three templates.6 Pages 21 UK AI Compliance/index.html US AI ComplianceUS AI compliance resources: regulatory hub covering federal orders, NIST AI RMF and state AI laws in California, Colorado, Texas and Illinois, a role guide and three templates.6 Pages 22 US AI Compliance/index.html Hong Kong AI ComplianceHong Kong AI compliance resources: regulatory hub covering the HKMA guidance on responsible AI adoption, SFC and PCPD guidance and the PDPO, a role guide, one template and a regulatory crosswalk.4 Pages 26 Hong Kong AI Compliance/index.html ReferenceAI security glossary and taxonomy, update notes and a casebook of real AI security incidents: plain definitions of prompt injection, RAG, agents, MCP, AI-SPM, guardrails and related terms.4 Pages 09 Reference/index.html Framework CrosswalksCross-references from this wiki to other frameworks: FINOS AIGF, AI BCF, NIST AI RMF, NIST AI 600-1, NIST AI 100-2, ISO/IEC 42001 and nine further ISO/IEC AI standards, OWASP, MITRE ATLAS, ISO/IEC 27001, NIST CSF, CIS Controls, SOC 2, the OECD AI Principles, trustworthy AI and ethics standards, international AI instruments, the AI Risk Map, the OWASP MCP Top 10, the OWASP Agent Control Standard, the NIST SSDF and its generative AI profile SP 800-218A, PCI DSS with the PCI SSC guidance on AI systems, CERT-In's AI security audit domains, and eight privacy laws.23 Pages 23 Framework Crosswalks/index.html Builder TrackStart here if you are building with AI: ten controls for a first agent, agent architecture patterns, privacy duties in code, developer pipeline checks, and a vendor-neutral toolkit AI code checker, MCP server, evidence export, instructions for every coding assistant , all with working code and tests that run in CI.5 Pages 24 Builder Track/index.html TemplatesDownloadable .xlsx and .docx templates built from the wiki: an AI risk register, system inventory, use-case triage, vendor scorecard, audit checklist, requirements traceability matrix, security risk review checklist, assurance baseline, control library and crosswalks, test case tracker, acceptable use policy, impact assessment, programme charter and incident report.14 Pages 25 Templates/index.html Community RulesCommunity rules for the AI Security Wiki: how author and co-author credit works, which changes are blocked automatically, how to contribute a page, and how to reuse the wiki under CC BY-SA 4.0. community-rules.html 1. Purpose The AI Security Wiki is a reference for securing AI adoption across an enterprise. It covers AI governance, AI risk management, secure engineering, operational monitoring, vendor evaluation, and assurance, in pages that can be reused as templates and that say what audit evidence each activity should produce. The wiki helps teams answer five practical questions: 1. Can this AI use case be safely adopted? 2. What risks, controls, and approvals are required? 3. Which engineering standards apply to the implementation? 4. How will security, privacy, sovereignty, and compliance requirements be evidenced? 5. How will the AI capability be monitored, tested, audited, and improved over time? New to the subject? Start with Foundations: AI Security vs. Security of AI 00 Foundations/index.html , the research paper that explains the concepts and sources behind the standards, templates, and test cases in the rest of the wiki. How this wiki relates to other frameworks This wiki is the implementation layer: control objectives, evidence, audit procedures and test cases that turn AI governance requirements into something a team can build, test and audit. It works alongside the catalogues and standards that say what to worry about and what the law expects, and does not replace them. | If you need to... | Start with | Then use this wiki for | |---|---|---| | Build a financial-services AI risk catalogue | FINOS AI Governance Framework | Controls, evidence and tests per risk, through the FINOS crosswalk 23 Framework Crosswalks/01 FINOS AIGF Crosswalk.html | | Set up a first, short AI governance baseline | AI Baseline Control Framework AI BCF | Control objectives, evidence and tests, through the AI BCF crosswalk 23 Framework Crosswalks/02 AI BCF Crosswalk.html | | Structure a management system | ISO/IEC 42001 with ISO/IEC 27001 | Technical control objectives and test criteria, through the ISO/IEC 42001 23 Framework Crosswalks/05 ISO IEC 42001 Crosswalk.html and ISO/IEC 27001 23 Framework Crosswalks/08 ISO IEC 27001 Crosswalk.html crosswalks | | Extend an existing security programme to AI | NIST CSF, CIS Controls or SOC 2 | The AI control objectives under each category, control or criterion, through the NIST CSF 23 Framework Crosswalks/09 NIST CSF Crosswalk.html , CIS Controls 23 Framework Crosswalks/10 CIS Controls Crosswalk.html and SOC 2 23 Framework Crosswalks/11 SOC 2 Crosswalk.html crosswalks | | Keep AI systems in a payment environment secure | PCI DSS v4.0.1 and the PCI SSC supplement Security Considerations for AI Systems | Controls and tests for each requirement and theme the supplement applies to AI, and a scoping checklist, through the PCI DSS AI Crosswalk 23 Framework Crosswalks/21 PCI DSS AI Crosswalk.html | | Run a secure software development lifecycle | NIST SSDF SP 800-218 and, for generative AI, SP 800-218A | AI-specific controls, code and tests per practice, through the NIST SSDF Crosswalk 23 Framework Crosswalks/20 NIST SSDF Crosswalk.html | | Prepare for an AI security audit in India | CERT-In AI Security Auditing Guidelines v1.0 | The controls, evidence and tests behind each of the nine audit domains, and how the four risk tiers map onto the wiki's tiering form, through the CERT-In crosswalk 23 Framework Crosswalks/22 CERT In AI Security Auditing Guidelines Crosswalk.html | | Compare privacy duties across jurisdictions | GDPR, CCPA, Quebec Law 25, Singapore PDPA and the GCC data protection laws | Controls per theme, through the Privacy Law Crosswalk 23 Framework Crosswalks/13 Privacy Law Crosswalk.html | | Structure risk language and a programme | NIST AI RMF | Engineering controls, evidence and scoring | | Define attack classes for testing | OWASP lists, MITRE ATLAS, NIST AI 100-2 | The 682-case test library, and the NIST AI 100-2 Crosswalk 23 Framework Crosswalks/14 NIST AI 100 2 Crosswalk.html | | Meet regional legal duties | The primary legal texts | The Regional AI Regulatory Hub 11 GCC AI Compliance/index.html sections | | Decide which risks apply to a use case | n/a | The use-case risk triage 02 Risk Management/02F AI Use Case Risk Triage.html | The FINOS AI Governance Framework is published by FINOS under CC BY 4.0. This wiki cites its identifiers for traceability and does not reproduce its text. 2. Mission Statement Establish a secure, governed, sovereign, and auditable approach to AI adoption by giving business, technology, cybersecurity, governance, compliance, audit, and vendor evaluation teams a common operating reference. The aim is to let teams adopt AI while reducing the risk of data leakage, prompt injection, model misuse, insecure agent actions, third-party exposure, regulatory non-compliance, and operational blind spots. 3. Strategic Objectives | Objective | Description | |---|---| | Protect Enterprise Data | Prevent unauthorized disclosure of confidential, regulated, operational, customer, and sensitive business information to AI systems. | | Secure AI Systems | Ensure AI-enabled applications, copilots, agents, models, connectors, APIs, and data pipelines are resilient against relevant threats. | | Enable Responsible Innovation | Provide practical guardrails that allow teams to adopt AI safely without unnecessary friction. | | Support Sovereignty and Compliance | Align AI initiatives with UAE data residency, regulatory, privacy, governance, and sector-specific requirements. | | Standardize AI Risk Decisions | Use a consistent risk assessment, control selection, treatment, exception, and approval process. | | Improve Audit Readiness | Maintain clear ownership, evidence, control status, test results, and version history for internal and external assurance. | | Strengthen Vendor Governance | Evaluate AI vendors consistently across security, data handling, model risk, compliance, and operational assurance criteria. | | Improve Operational Visibility | Establish monitoring, logging, detection, response, and continuous improvement expectations for AI services. | 4. Audience This wiki is intended for the following personas: | Persona | Primary Need | |---|---| | Executive Management | Understand decision points, governance obligations, risk posture, and assurance outcomes. | | AI Product Owners | Understand required approvals, control gates, risk treatment, and release readiness. | | AI Product Developers | Implement secure AI applications, integrations, prompts, RAG patterns, agents, APIs, and data flows. | | AI Security Researchers | Monitor AI threats, evaluate emerging risks, and improve controls. | | AI Red Teamers | Test AI systems for prompt injection, data leakage, misuse, unsafe tool use, and model abuse. | | Security Architecture | Define control requirements, review designs, approve exceptions, and maintain standards. | | Security Engineering | Implement preventive, detective, and responsive controls across the AI lifecycle. | | SOC and Incident Response | Monitor AI systems, investigate alerts, and respond to AI-related incidents. | | Vendor Evaluation Teams | Assess supplier capabilities, risks, evidence, contractual controls, and proof-of-concept results. | | GRC and Compliance | Map AI controls to governance, regulatory, privacy, and assurance requirements. | | Teams Building, Selling or Auditing AI in the GCC | Find the regional instruments that apply, with role guides and fill-in templates. | | Teams Building, Selling or Auditing AI under EU Rules | Find the AI Act, GDPR and related instruments that apply, with role guides and fill-in templates. | | Teams Building, Selling or Auditing AI in Other Jurisdictions | Find the national instruments that apply in Australia, Brazil, Canada, China, Hong Kong, India, Japan, Singapore, South Korea, the UK and the US, with a role guide and region-specific templates. | | Internal Audit | Validate control operation, evidence quality, decision traceability, and governance effectiveness. | 5. Wiki Design Principles The wiki follows eight principles: - Risk-first: every AI activity starts with a risk, impact, and data sensitivity assessment. - Control-first: requirements are expressed as reusable control objectives before being mapped to tools or vendors. - Lifecycle-first: controls apply from discovery through retirement, not only at deployment. - Persona-friendly: each user group has a clear starting point and operational playbook. - Vendor-neutral: controls and evaluation criteria are written independently of any product or supplier. - Sovereignty-aware: architecture and vendor decisions consider UAE residency, jurisdiction, and regulatory expectations. - Evidence-driven: each control should produce auditable evidence. - Operationally measurable: ownership, status, exceptions, test results, and improvement actions should be tracked. 6. AI Security Operating Model The wiki supports the following end-to-end operating model: The cycle then repeats: each use case is reviewed, improved, renewed or retired, and the result feeds the next round of discovery. 7. AI Security Lifecycle Navigation | Lifecycle Stage | Primary Activity | Required Wiki References | Typical Evidence | |---|---|---|---| | AI Discovery and Intake | Identify AI tools, use cases, data flows, business owner, and intended users. | AI Risk Methodology 02 Risk Management/02A AI Risk Methodology.html , AI Governance Operating Model 08 Governance/16 AI Governance Operating Model.html | Intake record, use-case description, business owner, data classification. | | AI Risk Assessment | Assess business impact, data sensitivity, model exposure, access paths, and vendor dependencies. | Enterprise AI Risk Register 02 Risk Management/02B Enterprise AI Risk Register.html , AI Security Control Objectives Library 03 Control Library/03 AI Security Control Objectives Library.html | Completed risk assessment, inherent/residual risk, treatment plan. | | Architecture and Control Design | Define security architecture, data boundaries, identity model, logging, and control requirements. | AI Security Control Objectives Library 03 Control Library/03 AI Security Control Objectives Library.html , Existing Security Control Baseline 03 Control Library/04 Existing Security Control Baseline.html , Microsoft Security Overlap and AI Gaps 03 Control Library/05 Microsoft Security Overlap and AI Gaps.html | Architecture review, control mapping, exception decisions. | | AI User Adoption | Govern use of browser AI, enterprise copilots, external AI tools, and acceptable use. | Browser AI security standard, acceptable use standard, governance operating model | User guidance, approved tool list, access controls, awareness records. | | AI-Assisted Development | Govern developers using AI coding assistants, coding agents, IDE plugins, and generated code. | AI Coding Assistant and Coding Agent Security Standard 04 Domain Standards/07 IDE AI Coding Assistant Security Standard.html , Developer Pipeline Checks 24 Builder Track/04 Developer Pipeline Checks.html , AI Product Developer Playbook 07 Role Based Playbooks/15A AI Product Developer Playbook.html | Secure coding checklist, agent settings, hook and CI results, repository review, generated code validation. | | Custom AI Application Build | Secure LLM apps, RAG pipelines, prompts, APIs, connectors, model gateways, and runtime controls. | Custom AI Application Runtime Security Standard 04 Domain Standards/08 Custom AI Application Runtime Security Standard.html , AI Red Team Playbook 06 Testing and Assurance/15C AI Red Team Playbook.html | Threat model, secure design review, runtime control evidence. | | Agentic AI Deployment | Govern agents that invoke tools, access systems, perform actions, or chain tasks. | Agentic AI Security and Tool Governance 04 Domain Standards/09 Agentic AI Security and Tool Governance.html | Tool permission matrix, approval rules, action logs, rollback controls. | | Vendor Evaluation | Evaluate AI suppliers, cloud services, models, integrations, and data handling. | AI Security Vendor Evaluation Master Framework 05 Vendor Evaluation/11 AI Security Vendor Evaluation Master Framework.html | Vendor questionnaire, evidence pack, PoC results, risk decision. | | Testing and Assurance | Validate controls through PoC tests, adversarial testing, red teaming, and evidence review. | AI Security PoC Test Case Library 06 Testing and Assurance/13 AI Security PoC Test Case Library.html , AI Security Audit and Evidence Checklist 06 Testing and Assurance/14 AI Security Audit and Evidence Checklist.html | Test results, findings, remediation plan, audit checklist. | | Monitoring and Operations | Monitor AI usage, suspicious prompts, data leakage, tool invocation, and incidents. | Assurance: Testing, Monitoring and Response 00 Foundations/08-Assurance-Testing-Monitoring-and-Response.html , Monitoring, Detection and Response test cases 10 Test Case Library/L17-monitoring-detection-and-response.html , runtime standard, governance operating model | Logs, alerts, incident records, response actions. | | Audit and Continuous Improvement | Review governance effectiveness, control operation, exceptions, and maturity. | AI Security Audit and Evidence Checklist 06 Testing and Assurance/14 AI Security Audit and Evidence Checklist.html , AI Governance Operating Model 08 Governance/16 AI Governance Operating Model.html | Audit evidence, management actions, maturity roadmap. | | Regional Compliance GCC | Identify the UAE and other GCC instruments that apply, and record what has been verified against the primary text. | GCC AI Regulatory Hub 11 GCC AI Compliance/01 GCC AI Regulatory Hub.html , Regulatory Crosswalk 11 GCC AI Compliance/07 Regulatory Crosswalk.html , templates T01 to T12 11 GCC AI Compliance/index.html | Regulator register, impact assessments, residency attestation, bilingual notices. | | Regional Compliance EU | Classify each system by AI Act role and risk tier, identify the EU instruments that apply, and record what has been verified against the primary text. | EU AI Regulatory Hub 12 EU AI Compliance/01 EU AI Regulatory Hub.html , EU Regulatory Crosswalk 12 EU AI Compliance/07 Regulatory Crosswalk.html , templates T01 to T12 12 EU AI Compliance/index.html | Classification records, impact assessments, transfer records, transparency notices, technical file index. | | Regional Compliance Other Jurisdictions | Identify the national instruments that apply, and record what has been verified against the primary text. | Australia 13 Australia AI Compliance/index.html , Brazil 14 Brazil AI Compliance/index.html , Canada 15 Canada AI Compliance/index.html , China 16 China AI Compliance/index.html , Hong Kong 26 Hong Kong AI Compliance/index.html , India 17 India AI Compliance/index.html , Japan 18 Japan AI Compliance/index.html , Singapore 19 Singapore AI Compliance/index.html , South Korea 20 South Korea AI Compliance/index.html , UK 21 UK AI Compliance/index.html , US 22 US AI Compliance/index.html | Regulatory register, region-specific records and templates. | 8. Navigation by Role 9. Core Repository Structure 00 Foundations/ Research paper "AI Security vs. Security of AI": terminology, two-axis model, threat taxonomy, reference architecture, assurance, standards, maturity roadmap, and references. 01 Strategy and Market/ AI security market landscape, technology trends, threat intelligence, glossary, and taxonomy. 02 Risk Management/ Risk methodology, enterprise AI risk register, risk treatment, exception model, and risk mapping. 03 Control Library/ Control objectives, existing baseline, Microsoft overlap, control gaps, and implementation guidance. 04 Domain Standards/ Browser AI, AI coding assistants and coding agents with pipeline gates , runtime AI applications, agentic AI, sovereignty, and data residency standards, sector overlays, and monitoring and adversarial ML for predictive models. 05 Vendor Evaluation/ Vendor master framework, supplier evidence model, and proof-of-concept scorecards. 06 Testing and Assurance/ PoC tests, adversarial testing, red team methodology, audit checklist, and evidence library. 07 Role Based Playbooks/ Persona-specific guidance for developers, researchers, red teamers, governance, audit, and operations. 08 Governance/ Operating model, committee charters, decision rights, training plan, acceptable AI use, and illustrative operating defaults exception limits, incident response times, monitoring thresholds, review calendar, release stages, log retention . 10 Test Case Library/ 682 detailed product evaluation test cases across 17 AI lifecycle layers and 6 emerging domains, with reference index, lab prerequisites, and framework adoption guide. 11 GCC AI Compliance/ Regulatory hub for the UAE, Saudi Arabia, Qatar, Bahrain and Oman, role guides, fill-in templates, fairness control drivers, regulatory crosswalk, and evidence register. 12 EU AI Compliance/ Regulatory hub for the EU AI Act, GDPR and related EU instruments, role guides, fill-in templates, impact assessment and fairness control drivers, regulatory crosswalk, and evidence register. 13 Australia AI Compliance/ Regulatory hub for Australia Privacy Act automated-decision transparency, consumer law, APRA standards , role guide, two templates, and regulatory crosswalk. 14 Brazil AI Compliance/ Regulatory hub for Brazil LGPD, sector rules, pending AI bill PL 2338/2023 , role guide, two templates, and regulatory crosswalk. 15 Canada AI Compliance/ Regulatory hub for Canada PIPEDA, Quebec Law 25, federal automated decision directive, OSFI E-23 ,\n role guide, three templates, and regulatory crosswalk. 16 China AI Compliance/ Regulatory hub for mainland China generative AI, algorithm, deep synthesis, labelling and ethics review\n measures, PIPL and data laws , role guide, three templates, and regulatory crosswalk. 17 India AI Compliance/ Regulatory hub for India DPDP Act and Rules, MeitY guidelines, RBI, SEBI, IRDAI, CERT-In , role guide,\n three templates, and regulatory crosswalk. 18 Japan AI Compliance/ Regulatory hub for Japan AI Promotion Act, Guidelines for AI Business, APPI, copyright law , role guide,\n two templates, and regulatory crosswalk. 19 Singapore AI Compliance/ Regulatory hub for Singapore IMDA frameworks including agentic AI, AI Verify, PDPA, MAS and CSA guidance ,\n role guide, three templates, and regulatory crosswalk. 20 South Korea AI Compliance/ Regulatory hub for South Korea AI Basic Act, generative AI labelling, high-impact AI, domestic representative ,\n role guide, three templates, and regulatory crosswalk. 21 UK AI Compliance/ Regulatory hub for the UK UK GDPR, Data Use and Access Act 2025, ICO, FCA and PRA expectations ,\n role guide, three templates, and regulatory crosswalk. 22 US AI Compliance/ Regulatory hub for the US federal orders and enforcement, NIST AI RMF, state AI laws , role guide,\n three templates, and regulatory crosswalk. 26 Hong Kong AI Compliance/ Regulatory hub for Hong Kong HKMA guidance on responsible AI adoption, SFC generative AI circular, PCPD guidance, PDPO , role guide, one template, and regulatory crosswalk with a principle-by-principle HKMA crosswalk. 23 Framework Crosswalks/ Cross-references from this wiki to other frameworks: AI frameworks FINOS AIGF, AI BCF, NIST AI RMF, NIST AI 600-1, ISO/IEC 42001, OWASP, MITRE ATLAS, OECD AI Principles , security frameworks ISO/IEC 27001, NIST CSF, CIS Controls, SOC 2 , secure development NIST SSDF and SP 800-218A , payment card security PCI DSS and the PCI SSC AI guidance , national audit frameworks the CERT-In AI Security Auditing Guidelines and a comparison of eight privacy laws. 24 Builder Track/ Start here if you are building with AI: ten controls for a first agent with reference code guard, sandbox, egress proxy and a runnable demo, privacy duties in code DPDP consent, rights, retention, children's data , developer pipeline checks, and a vendor-neutral toolkit AI code checker, MCP server, evidence export, instructions for every coding assistant , all with tests that run in CI. 25 Templates/ Downloadable .xlsx and .docx templates built from the wiki: AI risk register, system inventory, use-case triage, vendor scorecard, audit checklist, control library and crosswalks, test case tracker, acceptable use policy, impact assessment, programme charter and incident report. 09 Reference/ Glossary, taxonomy, update notes, incident casebook, and the regulatory verification status of each region. 10. Standards and Policy Hierarchy Enterprise AI Security Policy │ ├─ AI Governance Operating Model ├─ AI Risk Management Methodology ├─ AI Security Control Objectives Library ├─ AI User Adoption and Acceptable Use Standard ├─ AI-Assisted Development Security Standard ├─ Custom AI Application Runtime Security Standard ├─ Agentic AI Security and Tool Governance Standard ├─ Sovereign AI, UAE Compliance, and Data Residency Standard ├─ AI Vendor Evaluation Master Framework ├─ AI Testing, Red Teaming, and PoC Test Library └─ AI Audit and Evidence Checklist 11. Governance and Accountability | Function | Responsibility | Typical Evidence | |---|---|---| | AI Governance Committee | Provide strategic oversight, approve high-risk AI decisions, review exceptions, and monitor maturity. | Meeting minutes, approvals, risk acceptance records. | | Business Owner | Own the AI use case, business justification, user population, operational impact, and benefits realization. | Business case, use-case record, user list, process ownership. | | Data Owner | Confirm classification, permitted use, residency requirements, retention rules, and data-sharing limitations. | Data classification, data flow diagram, approval record. | | Security Architecture | Approve target architecture, control design, exceptions, and reference patterns. | Architecture review, control mapping, exception register. | | Security Engineering | Implement preventive and detective controls across identity, data, endpoint, network, cloud, application, and monitoring layers. | Configuration evidence, control test output, deployment records. | | AI Engineering | Build and maintain AI workflows, prompts, model integrations, RAG pipelines, agents, and application controls. | Design documentation, repository controls, deployment logs. | | SOC and Incident Response | Monitor AI activity, investigate events, respond to incidents, and recommend detection improvements. | SIEM alerts, incident tickets, investigation notes. | | GRC and Compliance | Maintain framework mappings, compliance obligations, risk reporting, and audit coordination. | Control mapping, compliance assessment, evidence register. | | Vendor Management | Coordinate AI supplier due diligence, contract requirements, evidence reviews, and renewal checkpoints. | Vendor assessment, contract clauses, SLA/security addenda. | | Internal Audit | Independently validate governance, control design, operating effectiveness, and evidence quality. | Audit plan, findings, management action tracking. | 12. Control Framework Mapping The wiki supports mapping AI security requirements to recognized control and governance frameworks. The detailed mapping should be maintained in the control library and audit checklist. How the instruments relate to each other is explained in Governance, Standards and Regulation 00 Foundations/09-Governance-Standards-and-Regulation.html . UAE and other GCC instruments are listed one by one, with their verification status, in the GCC AI Regulatory Hub 11 GCC AI Compliance/01 GCC AI Regulatory Hub.html . The AI Act, GDPR and related EU instruments are listed the same way in the EU AI Regulatory Hub 12 EU AI Compliance/01 EU AI Regulatory Hub.html . | Framework / Requirement Area | Wiki Mapping Purpose | |---|---| | ISO/IEC 27001 | Information security governance, risk management, access control, operations, supplier security, and audit evidence. See the ISO/IEC 27001 Crosswalk 23 Framework Crosswalks/08 ISO IEC 27001 Crosswalk.html . | | ISO/IEC 42001 | AI management system governance, accountability, lifecycle controls, risk treatment, and continuous improvement. | | NIST AI RMF | AI risk identification, measurement, management, governance, and trustworthiness characteristics. | | NIST AI 100-2 Adversarial Machine Learning | Shared vocabulary for attack classes and the scope of adversarial testing. See the NIST AI 100-2 Crosswalk 23 Framework Crosswalks/14 NIST AI 100 2 Crosswalk.html . | | ISO/IEC AI standards 38507, 42005, 42006, 23894, 5259 and others | Board-level AI governance, impact assessment, certification audits, AI risk management and data quality. See the ISO/IEC AI Standards Crosswalk 23 Framework Crosswalks/15 ISO IEC AI Standards Crosswalk.html . | | Trustworthy AI and ethics EU HLEG, UNESCO, IEEE 7000 series | Ethical requirements, well-being and bias considerations. See the Trustworthy AI and Ethics Crosswalk 23 Framework Crosswalks/16 Trustworthy AI Ethics Crosswalk.html . The IEEE content is based on available public data. | | International AI instruments Council of Europe Framework Convention, G7 Hiroshima Process | Treaty and international code of conduct commitments. See the International AI Instruments Crosswalk 23 Framework Crosswalks/17 International AI Instruments Crosswalk.html . | | AI Risk Map RiskFramework.org | Risk identification across twelve ownership domains, including strategy, finance, workforce and legal risks. See the AI Risk Map Crosswalk 23 Framework Crosswalks/18 AI Risk Map Crosswalk.html . | | OWASP Top 10 for LLM Applications 2026 edition and for Agentic Applications | Application and agent risk categories for developer guidance, threat modeling, and test-case design. See the OWASP Top 10 Crosswalk 23 Framework Crosswalks/06 OWASP Top 10 Crosswalk.html . | | OWASP MCP Top 10 beta | Risks of agents that connect to tools and data through the Model Context Protocol. See the OWASP MCP Top 10 Crosswalk 23 Framework Crosswalks/19 OWASP MCP Top 10 Crosswalk.html . | | OWASP Agent Control Standard v0.1.0, pre-1.0 | A wire protocol that standardises where an agent's actions can be allowed, denied or sent for approval, and the audit record of each decision. See the OWASP Agent Control Standard Crosswalk 23 Framework Crosswalks/23 OWASP Agent Control Standard Crosswalk.html . | | MITRE ATLAS | Adversary tactics and techniques against AI-enabled systems for threat-informed testing and incident description. | | EU AI Act | Legal obligations for in-scope providers and deployers of AI systems. | | NIST Cybersecurity Framework | Govern, Identify, Protect, Detect, Respond, and Recover coverage for AI-enabled systems. See the NIST CSF Crosswalk 23 Framework Crosswalks/09 NIST CSF Crosswalk.html . | | CIS Controls | Practical safeguards for inventory, identity, access, endpoint, network, data protection, monitoring, and response. See the CIS Controls Crosswalk 23 Framework Crosswalks/10 CIS Controls Crosswalk.html . | | SOC 2 | Trust Services Criteria for service organizations that put AI systems in the scope of an independent report. See the SOC 2 Crosswalk 23 Framework Crosswalks/11 SOC 2 Crosswalk.html . | | OECD AI Principles | Values-based principles that many national AI policies borrow from. See the OECD AI Principles Crosswalk 23 Framework Crosswalks/12 OECD AI Principles Crosswalk.html . | | CERT-In AI Security Auditing Guidelines | Nine audit domains, four risk tiers and advanced AI requirements for AI systems audited in India. See the CERT-In AI Security Auditing Guidelines Crosswalk 23 Framework Crosswalks/22 CERT In AI Security Auditing Guidelines Crosswalk.html . | | UAE Information Assurance and Cybersecurity Expectations | Alignment to local cybersecurity governance, data handling, hosting, resilience, and assurance obligations. | | UAE Data Residency and Sovereignty Requirements | Jurisdictional control over regulated data, hosting location, cross-border processing, vendor access, and evidence. | | Privacy and Data Protection Obligations | Data minimization, purpose limitation, consent/legal basis, retention, access, and breach response considerations. See the Privacy Law Crosswalk 23 Framework Crosswalks/13 Privacy Law Crosswalk.html . | 13. Key Control Domains The control library should maintain detailed objectives, implementation guidance, evidence expectations, and test procedures for at least the following domains: | Domain | Control Intent | |---|---| | AI Inventory and Intake | Maintain a complete register of AI tools, models, agents, data flows, owners, and approval status. | | Data Protection | Prevent sensitive data disclosure through prompts, training, fine-tuning, logs, telemetry, plugins, or vendor access. | | Identity and Access Management | Enforce least privilege, strong authentication, role-based access, service identity controls, and privileged action review. | | Prompt and Input Security | Detect and reduce prompt injection, jailbreak attempts, malicious instructions, unsafe content, and data exfiltration prompts. | | Output Validation | Manage hallucination, unsafe recommendations, policy violations, misinformation, and unsupported decisions. | | RAG and Knowledge Security | Protect indexes, embeddings, retrieval permissions, source grounding, and document-level authorization. | | Agent and Tool Governance | Control tool permissions, action approval, execution boundaries, rollback, and transaction logging. | | Application and API Security | Secure AI application interfaces, model gateways, secrets, rate limits, session handling, and error handling. | | Model and Vendor Risk | Evaluate model provenance, data usage, contractual protections, operational resilience, and third-party exposure. | | Monitoring and Detection | Capture AI activity logs, anomalous prompts, tool calls, data movement, model misuse, and policy violations. | | Incident Response | Define AI incident categories, escalation paths, investigation evidence, containment, and lessons learned. | | Audit and Assurance | Maintain traceable evidence of control design, operation, testing, exceptions, and remediation. | 14. Vendor-Neutral Operating Rule This wiki does not publish profiles of individual products or suppliers. Do not use vendor evaluation records as the primary source of truth for controls. Controls and standards must remain vendor-neutral. Vendor documents should reference the relevant control objectives, evidence requirements, and PoC tests rather than replacing enterprise standards. Your own vendor evaluation records should be used to record: - Supplier capabilities and limitations. - Contractual and compliance evidence. - Data residency and processing details. - Model and service security assurances. - PoC test results. - Known gaps, compensating controls, and residual risk decisions. 15. Wiki Maintenance and Publishing Rules | Rule | Requirement | |---|---| | Ownership | Each wiki document must have a named owner and custodian. | | Review Frequency | Controlled pages must be reviewed at least quarterly or after major AI, regulatory, or threat changes. | | Change Control | Significant changes to standards, control objectives, or risk methodology require approval by the appropriate governance authority. | | Evidence Linkage | Control pages should link to expected evidence, test cases, and audit checklist items. | | Version History | Every controlled page must maintain a version history with date, author, approver, and summary of change. | | Cross-Reference Consistency | Document names, control IDs, test IDs, and risk IDs must remain consistent across the wiki. | | Vendor Neutrality | The wiki names no individual products or suppliers. Vendor evaluation records must map to standards and controls; they must not redefine them. | | Exceptions | Exceptions must document business justification, compensating controls, expiry date, and approval authority. | 16. How to Use This Wiki 1. Start with the lifecycle stage that matches the AI initiative. 2. Use the role navigation table to identify the correct starting document. 3. Register the AI use case or tool before implementation or procurement. 4. Complete the AI risk assessment and apply required control objectives. 5. Use the domain standard that matches the AI implementation pattern. 6. Perform vendor assessment for third-party AI services, platforms, plugins, models, or integrations. 7. Run the required PoC and security tests before production use. 8. Collect evidence continuously for audit, compliance, and management reporting. 9. Update the risk register when controls, scope, vendors, models, or data flows change. 10. Review and improve controls based on incidents, findings, threat intelligence, and regulatory change. 17. Priority Implementation Roadmap | Phase | Focus Area | Outcome | |---|---|---| | Phase 1 | Establish inventory, intake, risk methodology, and governance decision model. | AI initiatives become visible, owned, and risk-ranked. | | Phase 2 | Publish control library, domain standards, and vendor evaluation framework. | Teams apply consistent controls and vendor due diligence. | | Phase 3 | Implement testing, red teaming, monitoring, and evidence collection. | Security effectiveness becomes measurable and auditable. | | Phase 4 | Mature reporting, metrics, automation, and continuous improvement. | AI security becomes operationalized and management-visible. | A time-boxed version of this roadmap 30 days, 90 days, 6 months, 12 to 24 months is in Maturity Model and Roadmap 00 Foundations/11-Maturity-Model-and-Roadmap.html . 18. Success Metrics | Metric | Why It Matters | |---|---| | Percentage of AI Tools Registered | Measures visibility and intake coverage. | | Percentage of AI Use Cases Risk Assessed | Measures governance adoption. | | High-Risk AI Initiatives with Approved Treatment Plans | Measures risk decision quality. | | AI Vendors Assessed before Onboarding | Measures supplier governance coverage. | | AI Applications with Completed Security Testing | Measures release readiness. | | AI Systems with Monitoring and Logging Enabled | Measures operational visibility. | | Open AI Control Exceptions past Expiry | Measures governance discipline. | | Audit Evidence Completeness Score | Measures assurance readiness. | | Number of AI Security Findings Remediated | Measures improvement execution. | These metrics measure coverage. For control-effectiveness metrics such as injection test success rate, privileged-action gating, and time to disable, see Assurance: Testing, Monitoring and Response 00 Foundations/08-Assurance-Testing-Monitoring-and-Response.html 85-metrics . 19. Document Governance | Item | Value | |---|---| | Original Author | Nachiket Sathaye | | Co-Author | Ankush Jain | | Document Owner | AI Security Program | | Custodian | Security Architecture Team | | Status | Published | | Review Cycle | Quarterly | | Approval Authority | AI Governance Committee | | Primary Users | AI, cybersecurity, GRC, compliance, vendor evaluation, operations, and audit teams | 20. Version History The three latest versions, newest first. The full history since version 1.0 is in the Update Notes 09 Reference/19 Update Notes.html full-version-history . | Version | Date | Author | Summary of Change | |---|---|---|---| | 2.60 | 2026-11-07 | Nachiket Sathaye | OWASP Agent Control Standard Crosswalk for specification v0.1.0: its 22 enforcement points, five verdicts and seven conformance profiles placed against the wiki's controls, the three controls it has no counterpart for, and its fail-open defaults. See the Update Notes 09 Reference/19 Update Notes.html . | | 2.59 | 2026-11-07 | Nachiket Sathaye | OWASP Top 10 for LLM Applications moved from the 2025 to the 2026 edition, published 4 August 2026: 465 identifier references remapped across 23 pages, System Prompt Leakage renamed to Hidden Context Exposure, the Foundations list rewritten with the rank movements and the new ranking method, and five test cases given a mapping that a widened category now covers. See the Update Notes 09 Reference/19 Update Notes.html . | | 2.58 | 2026-11-04 | Nachiket Sathaye | Builder Toolkit 1.1: the comparison with ai-secure-by-design brought up to its v0.2.0 release, which now runs the wiki's AIW rules and control library as an opt-in regime and adds Python scaffolds and personal-data detection; Privacy Duties in Code and Developer Pipeline Checks link to it. | 21. Quick Links 22. About the Author Nachiket Sathaye Cybersecurity Leader, AI Security and Governance Cybersecurity professional with 20+ years of experience across Critical Infrastructure, BFSI and Manufacturing. I work at both the technical and the executive level, aligning GRC, Zero Trust, security architecture and AI governance with business outcomes. My current focus is helping organisations adopt GenAI, RAG and agentic systems securely across the full AI lifecycle, and building NIST AI RMF, ISO/IEC 42001, EU AI Act and Responsible AI principles into enterprise programmes. LinkedIn: linkedin.com/in/nachiket-sathaye https://www.linkedin.com/in/nachiket-sathaye/ 23. About the Co-Author Ankush Jain Cybersecurity Governance & Risk Leader | AI Security & Digital Trust Strategist | CISSP, CCSP Governance-focused cybersecurity leader with 19+ years of experience protecting critical infrastructure and global enterprises across MENA and APAC. I specialize in cybersecurity governance, enterprise risk management, AI risk reviews, and digital trust frameworks that enable organizations to embrace transformation securely. LinkedIn: linkedin.com/in/ankushjai https://www.linkedin.com/in/ankushjai/