MarketplaceAIAI-CAIQ
AIGuideline

AI-CAIQ

AI Consensus Assessments Initiative Questionnaire (AI-CAIQ)

The AI-CAIQ is a structured framework from the Cloud Security Alliance designed to help organizations self-assess compliance with AI-specific security, governance, privacy, and resilience controls. It builds on the widely adopted CAIQ for cloud security.

Overview

The AI Consensus Assessments Initiative Questionnaire (AI-CAIQ) provides organizations with tools to systematically identify compliance with controls specific to AI systems. The framework targets critical areas such as governance, security, privacy, and operational resilience in AI implementations. It includes control specifications (e.g., 'Establish audit policies'), self-assessment questions (e.g., 'Are audit policies reviewed annually?'), and taxonomy that maps AI lifecycle stages like development and deployment. Additionally, it offers justification sections to evidence compliance. This resource also aligns with the CSA AI Controls framework, supporting organizations in managing AI-related risks and demonstrating due accountability.

Related in AI

AIFramework

NIST AI RMF — NIST AI Risk Management Framework

The AI Risk Management Framework (AI RMF) is a voluntary framework developed by NIST to help organizations design, develop, use, and evaluate AI systems with trustworthiness considerations. It addresses governance, mapping, measuring, and managing AI risks.

National Institute of Standards and Technology (NIST) • United States • v1.0

View details
AIStandard

ISO/IEC 42001 — ISO/IEC 42001:2023 - Artificial Intelligence Management System

ISO/IEC 42001:2023 is the first international standard for Artificial Intelligence Management Systems (AIMS). It provides requirements for establishing, implementing, maintaining, and improving AIMS, focusing on the responsible use, governance, and risk management of AI across organizations.

ISO/IEC • v2023

View details
AIRegulation

EU AI Act — EU Artificial Intelligence Act

The EU AI Act (Regulation (EU) 2024/1689) is the world’s first comprehensive law regulating artificial intelligence. It establishes a risk-based framework that classifies AI systems into four categories—unacceptable, high-risk, limited-risk, and minimal-risk—with stricter obligations applied to higher-risk systems.

European Union • EU • vJanuary 2024

View details
AIStandard

AIUC-1 — AIUC-1

AIUC-1 is a standard focused on the security, safety, and reliability of AI agents used in enterprises. It addresses risks related to data privacy, security, accountability, and societal concerns while providing certification for compliant organizations.

Artificial Intelligence Underwriting Company (AIUC) • vApril 15, 2026

View details

Ready to manage these frameworks?

6clicks maps regulations to controls, evidence and risks — automatically.

Book your strategy call