CSA AI Controls Matrix

00:00 Introduction to AI Controls Matrix
01:10 The Need for AI Controls
03:23 Framework Structure and Development
04:45 Control Objectives and Security Domains
09:20 Lifecycle Relevance and Threat Categories
14:03 Implementation and Compliance Guidelines

Cloud Security Alliance (CSA) AI Controls Matrix Deep Dive | Victor Monga & Marina Bregkou

Join Victor Monga (CSA LA Chapter Board) and Marina Bregkou (Principal Research Analyst, CSA) for an in-depth discussion about the new AI Controls Matrix (AICM)—Cloud Security Alliance’s upcoming framework designed to help organizations build secure, ethical, and transparent AI systems.

📌 About the Video
In this session, Marina introduces the CSA AI Controls Matrix, explains its purpose, design, and structure, and answers live questions. Learn:
✅ Why CSA built the AI Controls Matrix on top of the well-known Cloud Controls Matrix (CCM)
✅ How the framework addresses AI-specific risks, ethics, explainability, and trust
✅ The five key architectural pillars of the matrix (Control Type, Ownership, Architecture Relevance, Lifecycle Relevance, Threat Categories)
✅ How controls map to GenAI service layers and real-world AI threats
✅ Upcoming timelines for publication (June 2025), self-assessment questionnaires, implementation, and auditing guidelines

Whether you're a security professional, auditor, AI developer, compliance lead, or policymaker—this session offers a clear look at how CSA is making AI safer and more trustworthy.

📌 Key Topics Covered:
The need for AI security and governance frameworks
Differences and overlaps between CCM and AICM
AI threat categories (model manipulation, data poisoning, model theft, etc.)
Control ownership mapping for model providers, orchestration services, and applications
Alignment with standards (ISO 42001, NIST AI RMF, EU AI Act)

💬 Get Involved
CSA working groups are open and vendor-agnostic. If you’re interested in contributing to the AI Controls Matrix or other CSA initiatives, consider joining the CSA Circle Community, Slack channels, or local chapters.