CSA AI Controls Matrix
Cloud Security Alliance's structured controls for securing AI systems.
What it does
The Cloud Security Alliance's AI-specific controls matrix — a structured set of controls for securing AI systems. Published alongside MAESTRO and other CSA AI security initiatives. Covers adversarial robustness, system transparency, and cloud-specific AI security requirements.
Security relevance
CSA is a trusted authority in cloud security, and this matrix extends their expertise to AI. Complements ISO 42001 and NIST AI RMF with cloud-native AI controls. Natural companion to the MAESTRO framework for organisations using CSA standards.
When to use it
Use when building AI security control frameworks, particularly for cloud-deployed AI workloads. Reference alongside OWASP, NIST, and ISO standards. The structured matrix format makes it practical for mapping controls to your specific environment.
OWASP coverage
Risks addressed — mapped to both OWASP Top 10 standards. 10 in LLM, 10 in Agentic.
The raw record
What Yuntona stores. Single source of truth — fork it on GitHub.
name: CSA AI Controls Matrix slug: csa-ai-controls-matrix type: Mixed category: AI Governance & Standards url: https://cloudsecurityalliance.org/artifacts/ai-controls-matrix reviewed: 2026-04 added: 2026-04 updated: 2026-04 risks: llm: [LLM01, LLM02, LLM03, LLM04, LLM05, LLM06, LLM07, LLM08, LLM09, LLM10] asi: [ASI01, ASI02, ASI03, ASI04, ASI05, ASI06, ASI07, ASI08, ASI09, ASI10] complexity: Guided Setup pricing: — audience: Blue Team lifecycle: [govern] tags: [Cloud, Controls, CSA, Framework]