CSA AICM Controls with ISMS
Control-by-control mapping between CSA AICM and the Kudo ISMS, with the complete structure ready for audits and evidence.
Table of the 75 CSA AICM v1 controls organized by domain and mapped to the Kudo ISMS policies.
GOV — AI Governance
| Code | ISMS Policy |
|---|---|
| GOV-01 | Information Security Policy |
| GOV-02 | Information Security Policy |
| GOV-03 | Information Security Policy |
| GOV-04 | Information Security Policy |
| GOV-05 | Documents and Records Policy |
| GOV-06 | Documents and Records Policy |
| GOV-07 | Compliance Management Policy |
| GOV-08 | Compliance Management Policy |
RSK — AI Risk Management
| Code | ISMS Policy |
|---|---|
| RSK-01 | Risk Management Policy |
| RSK-02 | Risk Management Policy |
| RSK-03 | Risk Management Policy |
| RSK-04 | Risk Management Policy |
| RSK-05 | Risk Management Policy |
| RSK-06 | Risk Management Policy |
DAT — AI Data Security
| Code | ISMS Policy |
|---|---|
| DAT-01 | Asset Management Policy |
| DAT-02 | Asset Management Policy |
| DAT-03 | Asset Management Policy |
| DAT-04 | Asset Management Policy |
| DAT-05 | Asset Management Policy |
| DAT-06 | Privacy Policy |
| DAT-07 | Privacy Policy |
| DAT-08 | Privacy Policy |
| DAT-09 | Privacy Policy |
| DAT-10 | Privacy Policy |
MDS — AI Model Security
| Code | ISMS Policy |
|---|---|
| MDS-01 | IT Security Policy |
| MDS-02 | IT Security Policy |
| MDS-03 | IT Security Policy |
| MDS-04 | IT Security Policy |
| MDS-05 | IT Security Policy |
| MDS-06 | IT Security Policy |
| MDS-07 | Secure Development Policy |
| MDS-08 | Secure Development Policy |
| MDS-09 | Secure Development Policy |
| MDS-10 | Secure Development Policy |
| MDS-11 | Secure Development Policy |
| MDS-12 | Secure Development Policy |
OPS — AI Operations Security
| Code | ISMS Policy |
|---|---|
| OPS-01 | IT Security Policy |
| OPS-02 | IT Security Policy |
| OPS-03 | IT Security Policy |
| OPS-04 | IT Security Policy |
| OPS-05 | Logging and Monitoring Policy |
| OPS-06 | Logging and Monitoring Policy |
| OPS-07 | Logging and Monitoring Policy |
| OPS-08 | Logging and Monitoring Policy |
SUP — AI Supply Chain Security
| Code | ISMS Policy |
|---|---|
| SUP-01 | Vendor Management Policy |
| SUP-02 | Vendor Management Policy |
| SUP-03 | Vendor Management Policy |
| SUP-04 | Vendor Management Policy |
| SUP-05 | Vendor Management Policy |
| SUP-06 | Vendor Management Policy |
PRI — AI Privacy
| Code | ISMS Policy |
|---|---|
| PRI-01 | Privacy Policy |
| PRI-02 | Privacy Policy |
| PRI-03 | Privacy Policy |
| PRI-04 | Privacy Policy |
| PRI-05 | Privacy Policy |
| PRI-06 | Privacy Policy |
| PRI-07 | Privacy Policy |
| PRI-08 | Privacy Policy |
ETH — AI Ethics and Responsible AI
| Code | ISMS Policy |
|---|---|
| ETH-01 | Compliance Management Policy |
| ETH-02 | Compliance Management Policy |
| ETH-03 | Compliance Management Policy |
| ETH-04 | Compliance Management Policy |
| ETH-05 | Information Security Policy |
| ETH-06 | Information Security Policy |
COM — AI Compliance
| Code | ISMS Policy |
|---|---|
| COM-01 | Compliance Management Policy |
| COM-02 | Compliance Management Policy |
| COM-03 | Compliance Management Policy |
| COM-04 | Compliance Management Policy |
| COM-05 | Documents and Records Policy |
INC — AI Incident Response
| Code | ISMS Policy |
|---|---|
| INC-01 | Incident Management Policy |
| INC-02 | Incident Management Policy |
| INC-03 | Incident Management Policy |
| INC-04 | Incident Management Policy |
| INC-05 | Incident Management Policy |
| INC-06 | Incident Management Policy |