NIST AI RMF, ISO 42001, EU AI Act, and regulatory frameworks
Newest first · 16 reviewed on this page
Search insteadAnand Jha, Kirtiraj Bhatele, Pratyush Mihir
Large Language Models (LLMs) are being deployed in clinical and healthcare systems, which requires serious consideration of their safety, reliability. This chapter investigates hallucinations, harms to patients and healthcare employees as well as methods of measuring the…
Alexander Nemecek, Vipin Chaudhary, Erman Ayday
On August 2, 2026, the obligations of Article 50 of the EU AI Act took effect, requiring generative AI providers to mark the content their systems produce and ensure it can be detected as AI-generated. Days later, Anthropic disclosed that every Claude model released after that…
Mohsen Seyedkazemi Ardebili
When an autonomous AI agent does something consequential, what can be proven about what it did? Agent-observability platforms capture traces, but a trace is mutable: alterable undetected, with no recipe for re-executing it, silent on whether captured secrets were removed.…
Siméon Campos, H. Papadatos, Fabien Roger +3
The recent development of powerful AI systems has highlighted the need for robust risk management frameworks in the AI industry. Although companies have begun to implement safety frameworks, current approaches often lack the systematic rigor found in other high-risk industries.…
Steve Wilson, OWASP LLM AI Security Team
The definitive OWASP guide identifying the top 10 most critical security risks in LLM applications, with descriptions, examples, and mitigation strategies.
OWASP GenAI Security Project
Identifies the top 10 security risks specific to agentic AI applications including excessive agency, unsafe tool execution, and inadequate oversight.
MITRE Corporation
Knowledge base of adversarial tactics, techniques, and case studies for AI systems, modeled on the ATT&CK framework for cybersecurity.
Rob van der Veer, OWASP AI Exchange Team
Comprehensive guide for AI security and privacy including threat analysis, controls, and regulatory mapping for AI systems.
OWASP Foundation, Sandy Dunn, Jackie McGuire
Practical checklist for organizations deploying LLMs covering security, governance, legal, and regulatory considerations with actionable steps.
Apostol Vassilev, Alina Oprea, Alie Fordyce +1
NIST's authoritative taxonomy of adversarial ML attacks and mitigations covering evasion, poisoning, privacy, and abuse attacks against AI systems.
Gary McGraw, Harold Figueroa, Katie McMahon +1
Comprehensive practitioner guide covering AI/ML security from an architectural risk analysis perspective, with practical defense patterns.
Anthropic
Framework defining AI Safety Levels (ASL) for evaluating and managing risks from increasingly capable AI systems.
European Parliament
The EU's comprehensive AI regulation establishing risk-based categories, conformity assessments, and requirements for high-risk AI systems.
OWASP Foundation
Open-source threat modeling tool supporting AI/ML system threat models, data flow diagrams, and STRIDE methodology for GenAI applications.
Clark Barrett, Brad Boyd, Elie Burzstein +20
Comprehensive treatment of generative AI security risks across the ML lifecycle with a focus on practical mitigations and deployment considerations.
National Institute of Standards and Technology
Voluntary framework for managing risks in AI systems across the lifecycle, organized into Govern, Map, Measure, and Manage functions.
International Organization for Standardization
International standard specifying requirements for establishing, implementing, maintaining and continually improving an AI management system within organizations.
OpenAI
OpenAI's approach to tracking, evaluating, forecasting, and protecting against catastrophic risks of frontier AI models.
Google's conceptual framework for secure AI systems with six core elements covering security foundations, detection, automation, and contextualization.
Cybersecurity and Infrastructure Security Agency
CISA's strategic roadmap for AI covering responsible use, assuring AI systems, securing AI adoption, and collaborating on AI governance.