Download Publication
Who it's for:
- AI Service Customers
- AI Service Providers
- Auditors and Consultants
Introductory Guidance to AICM
Release Date: 11/19/2025
The AI Controls Matrix (AICM) provides a foundational security and governance framework for AI service providers and customers. It helps them securely implement, assess, and manage AI systems across the AI supply chain.
The AICM establishes a clear and actionable set of AI risk management controls and supporting mechanisms. CSA has tailored these controls to the unique risks and responsibilities inherent in AI development, deployment, and consumption.
This document provides introductory guidance on the AICM. Understand what the AICM is, how to use it, and the various resources available that can help you get the most out of it.
Key Takeaways:
- The primary purpose of the AICM
- How the components of the AICM work, including the mappings, AI-CAIQ, Implementation Guidelines, and Auditing Guidelines
- Who should use the AICM, and in what ways
- The purpose, scope, and structure of the AICM Implementation Guidelines
- The purpose, scope, and structure of the AICM Auditing Guidelines
Download this Resource
Prefer to access this resource without an account? Download it now.
Interested in helping develop research with CSA?
Related Certificates & Training
.png)
Learn the core concepts, best practices and recommendation for securing an organization on the cloud regardless of the provider or platform. Covering all 14 domains from the CSA Security Guidance v4, recommendations from ENISA, and the Cloud Controls Matrix, you will come away understanding how to leverage information from CSA's vendor-neutral research to keep data secure on the cloud.
Learn more
Learn more


.jpeg)
.jpeg)
.jpeg)
