AICM mapping to NIST 600-1

The Cloud Security Alliance (CSA) invites public peer review of its draft mapping between the AI Controls Matrix (AICM) and NIST 600-1. This initiative supports our ongoing commitment to harmonize AI security and governance frameworks, enabling organizations to better manage AI-specific risks across regulatory and industry-aligned standards. The purpose of this review is to validate the accuracy, completeness, and applicability of the control mappings, and to ensure that they support practical and actionable implementation of AI risk management practices. The mappings identify areas of full, partial, or no alignment between the AICM and NIST 600-1, and where appropriate, offer interpretive guidance or addendums to support implementation. By aligning these frameworks, CSA aims to: Promote consistent and secure deployment of AI/ML systems Facilitate easier compliance with emerging AI regulations and standards Increase transparency and interoperability across governance programs Support organizations in operationalizing AI risk management with confidence