About the author

Emmanuel Guilherme Jr. is a Senior Global Information Technology Auditor and AI security researcher based in Toronto, Canada.

He co-leads the Data Security Initiative of the OWASP GenAI Security Project, contributing to the GenAI Data Security Risks and Mitigations 2026 publication. He serves as a Candidate Expert on Canada's mirror committee for ISO/IEC JTC 1/SC 42, the body that shapes ISO/IEC 42001 (AI management systems), 23894 (AI risk management), and 42005 (AI system impact assessment). He co-founded the Toronto chapter of Threat Modeling Connect and is a technical reviewer for Packt publications on AI security.

His professional work spans IT audit at a Tier 1 multinational, an in-house Red Team build at a Canadian Schedule I bank, and AI security research at McMaster University. He is trilingual (English, Portuguese, Spanish) and currently pursuing CISA, AIGP, and ISO/IEC 42001 Lead Auditor certifications.

Find him at LinkedIn · GitHub · OWASP GenAI Security Project.

The four-repo portfolio

This catalog is one of four signature projects:

• AI-Controls-Catalog — Audit AI (this repo)
• AI-RedTeam-Framework — Attack AI
• AI-Governance-Toolkit — Govern AI
• Shadow-AI-Defense — Defend against rogue AI

The four-repo system represents Govern → Audit → Attack → Defend: a program-level open-source AI security ecosystem for regulated enterprises.

Citation

Guilherme Jr., E. (2026). AI Controls Catalog (Version 0.1.0). https://aicontrolscatalog.dev

Licensing

• Code: MIT
• Content: Creative Commons Attribution 4.0 International