MarketplaceAIAI-CAIQ
AIGuideline

AI-CAIQ

AI Consensus Assessments Initiative Questionnaire (AI-CAIQ)

The AI-CAIQ is a structured framework from the Cloud Security Alliance designed to help organizations self-assess compliance with AI-specific security, governance, privacy, and resilience controls. It builds on the widely adopted CAIQ for cloud security.

Overview

The AI Consensus Assessments Initiative Questionnaire (AI-CAIQ) provides organizations with tools to systematically identify compliance with controls specific to AI systems. The framework targets critical areas such as governance, security, privacy, and operational resilience in AI implementations. It includes control specifications (e.g., 'Establish audit policies'), self-assessment questions (e.g., 'Are audit policies reviewed annually?'), and taxonomy that maps AI lifecycle stages like development and deployment. Additionally, it offers justification sections to evidence compliance. This resource also aligns with the CSA AI Controls framework, supporting organizations in managing AI-related risks and demonstrating due accountability.

Related in AI

AIFramework

AICM v1.1 — AI Controls Matrix v1.1

The AI Controls Matrix v1.1 (AICM) is a vendor-agnostic framework for securing cloud-based AI systems. It consists of 247 control objectives across 18 security domains, mapping to standards like ISO 27001 and ISO 42001.

Cloud Security Alliance (CSA) • Global • v1.1

View details
AIFramework

NIST AI RMF — NIST AI Risk Management Framework

The AI Risk Management Framework (AI RMF) is a voluntary framework developed by NIST to help organizations design, develop, use, and evaluate AI systems with trustworthiness considerations. It addresses governance, mapping, measuring, and managing AI risks.

National Institute of Standards and Technology (NIST) • United States • v1.0

View details
AIStandard

ISO/IEC 42001 — ISO/IEC 42001:2023 - Artificial Intelligence Management System

ISO/IEC 42001:2023 is the first international standard for Artificial Intelligence Management Systems (AIMS). It provides requirements for establishing, implementing, maintaining, and improving AIMS, focusing on the responsible use, governance, and risk management of AI across organizations.

ISO/IEC • v2023

View details
AIRegulation

EU AI Act — EU Artificial Intelligence Act

The EU AI Act (Regulation (EU) 2024/1689) is the world’s first comprehensive law regulating artificial intelligence. It establishes a risk-based framework that classifies AI systems into four categories—unacceptable, high-risk, limited-risk, and minimal-risk—with stricter obligations applied to higher-risk systems.

European Union • EU • vJanuary 2024

View details

Ready to manage these frameworks?

6clicks maps regulations to controls, evidence and risks — automatically.

Book your strategy call