CSA AICM with ISMS

GOV-01–GOV-08 — Governance, strategy and policies for AI systems.

RSK-01–RSK-06 — Identification, assessment and treatment of risks in AI systems.

COM-01–COM-05 — Regulatory compliance applicable to AI systems.

MDS-01–MDS-06, OPS-01–OPS-04 — Compute infrastructure for model training and deployment.

MDS-07–MDS-12 — Secure model lifecycle: training, validation and deployment.

SUP-01–SUP-06 — AI supply chain security: datasets, models and third-party tools.

DAT-01–DAT-05 — Inventory and classification of datasets and data assets used in AI.

DAT-06–DAT-10, PRI-01–PRI-08 — Privacy and personal data protection across the AI lifecycle.

ETH-01–ETH-06 — Ethics, fairness, transparency and accountability in AI systems.

OPS-05–OPS-08 — Continuous monitoring of models in production and anomaly detection.

INC-01–INC-06 — Management of and response to security incidents in AI systems.