CSA AICM and Kudo
How Kudo, through its ISMS, relates to CSA AICM: domain mapping, controls and compliance objectives explained step by step.
The Cloud Security Alliance AI Control Matrix (CSA AICM) is a security control framework designed specifically for artificial intelligence and machine learning systems. It complements the CSA CCM by extending coverage to the complete lifecycle of AI models. Kudo maps its domains and controls to the framework and the ISMS policies.
CSA AICM v1 Structure
10 Domains
From AI governance and ethics to model security and incident response.
75 Controls
Distributed across the 10 control domains of the AICM framework.
CSA AICM v1 Domains
| Code | Domain | Controls |
|---|---|---|
| GOV | AI Governance | 8 |
| RSK | AI Risk Management | 6 |
| DAT | AI Data Security | 10 |
| MDS | AI Model Security | 12 |
| OPS | AI Operations Security | 8 |
| SUP | AI Supply Chain Security | 6 |
| PRI | AI Privacy | 8 |
| ETH | AI Ethics and Responsible AI | 6 |
| COM | AI Compliance | 5 |
| INC | AI Incident Response | 6 |
| Total | 75 |