AI Governance Engineer
GitHub

AICM

By Updated

The CSA AI Controls Matrix, a control framework (v1.1, 247 control objectives across 18 domains) that maps to ISO 42001, ISO 27001 and NIST AI RMF and underpins STAR for AI 1.

Developed in
ch. 08, CSA AICM and STAR for AI
Chapters
ch. 08, Regulatory Map
Source
1 numbered reference, listed below

Where it is used

4 chapters of the Body of Knowledge use the term. Each link opens the first section that does.

Patterns that use this term

8 pattern pages use the term, most mentions first.

  • STAR for AI

    CSA's security assurance and certification programme for AI, built on the AICM, with a self-assessment tier, an automated "Valid-AI-ted" tier and a Level 2…

  • ISO/IEC 42001

    The ISO/IEC standard (2023) that specifies requirements for an AI management system, certifiable by accredited bodies.

  • NIST AI RMF

    The NIST Artificial Intelligence Risk Management Framework 1.0 (NIST AI 100-1, January 2023): voluntary guidance organised as a Core of four functions…

Sources

  1. [1] AI Controls Matrix v1.1 (247 control objectives, 18 domains) and STAR for AI. Cloud Security Alliance. 2026-06-22. https://cloudsecurityalliance.org/star/ai (verified: primary)

Definitions of legal terms paraphrase the cited text, which governs. Dated statements are as of .

Cite this term

García Aibar, J. (2026). AICM. In AI Governance Engineering: The Thesis & Body of Knowledge (v0.5.0), Glossary. https://doi.org/10.5281/zenodo.22956197. https://aigovernanceengineer.com/glossary/aicm. CC BY 4.0

BibTeX

@misc{aige2026aicm,
  author  = {Jorge García Aibar},
  title   = {{AICM}},
  note    = {Glossary, AI Governance Engineering: The Thesis \& Body of Knowledge, version 0.5.0},
  year    = {2026},
  doi     = {10.5281/zenodo.22956197},
  url     = {https://aigovernanceengineer.com/glossary/aicm}
}