3 Measures
Software Development Security
Customer Usage Disclosures
Redundancy and Failover Test Records
Product Requirements Documents (PRD)
2 Measures
Encryption / Cryptography
Encryption Policy
Cryptographic Configuration Standards and Implementation Records
3 Measures
Documentation & Transparency
System Fact Sheets (Model Cards)
User and Service Account Inventory with Activity Logs
On-boarding Records
2 Measures
Correction
Adversarial Attack Simulation Report
Nonconformity and Corrective Action Register
4 Measures
Internal Audit
Off-boarding Records
Internal Audit Programme
Audit Procedures/Methodology
3 Measures
Business Continuity
Disaster Recovery Plan
Business Continuity Plan
Load Balancer Configuration (internal pentest bac test)
7 Measures
Incident Management
Incident Response Plan
Records of AI Concerns Reports
Incident Report
1 Measures
Equipment
Secure Disposal or Re-use of Equipment Procedure
1 Measures
Site Security
Physical Security Policy
5 Measures
Vulnerability Management
Penetration Testing Report
Technical Vulnerability Management Records
Threat Assessment Report
6 Measures
Test Information
Bias and Fairness Testing Results
V&V Plan and Test Reports
Test Data Management Policy or Procedure
4 Measures
Source Code
Access Control Configurations for Source Code Repositories
Version Control System Logs
Secure Coding Guidelines
13 Measures
Secure Development
System Final Release Checklist
Code Review Sample
System Architecture Design Document
4 Measures
Backups
Backup Schedule and Success Logs
Information Backup Policy
Multi Zone/Region Availability
4 Measures
Endpoint Security
Screen Lock Configuration
Antivirus/Anti-malware Software Deployment and Update Logs
Approved Software List (Whitelist)
2 Measures
Data Masking
Data Masking Policy
Data Masking Documentation
3 Measures
Secure Authentication
Password Policy
Procedures for Managing Authentication Credentials
Multi-Factor Authentication (MFA) Implementation Records
9 Measures
Logging & Monitoring
Alerting System Configurations and Logs
AI Log Monitoring Configuration and Performance Records
Endpoint Management System Records
3 Measures
Network Security
Network Security Policy
Network Diagram
WAF configuration
1 Measures
Data at Rest
Data-at-Rest Encryption Standard
2 Measures
Data in Transit
Data-in-Transit Encryption Standard
SSL/TLS Lifecycle Log
5 Measures
Access Control
Access Reviews Documentation
Access Control Policy
Privileged Utility Program Usage Logs
16 Measures
Data Protection
Data Protection Policy
Data Acquisition Log
Exploratory Data Analysis (EDA) Reports
7 Measures
Inventory
MLOps Platform Configuration Documents
Document Distribution Records
AI Tooling Version Control Records
2 Measures
Remote Working
Examples of Security Reminders
Remote Working Policy
4 Measures
Training
AI Competence Assessment Matrix
Role-Based Security Training Plan
Training Records
5 Measures
Onboarding/Offboarding
Off-boarding Checklist
Acceptable Use Policy
AI System Procurement & Use Policy
3 Measures
Recruitment
Code of Conduct
Template Employment Contract
Personnel Background Verification
1 Measures
Vendor Management
Vendor Management Policy
2 Measures
Objectives
AI Objective Action Plan
Information Security Objectives
8 Measures
Management Documentation
Compliance Monitoring and Reporting Records
AIMS Performance Measurement Plan
Budget Allocation Records
2 Measures
Change Management
Change Management Policy
Change Request Forms / Change Log
7 Measures
Risk Management
Risk Assessment Report
AI Risk Criteria Document
AI System Impact Assessment (AIIA) Procedure
5 Measures
Interested Parties
Register of Interested Parties and Their Requirements
Stakeholder Analysis
List of contact special interest groups
9 Measures
Legal & Regulatory
Records of Processing Activities (ROPA)
PII/Copyright Clearance Certificates
Expert Consultation Records
3 Measures
Roles & Responsibilities
Roles and Responsibilities
Organizational Charts
RACI Matrix
7 Measures
Management System Documentations
Statement of Applicability
Internal Communications
AI Management System Process Flowcharts/Maps