Main site ↗

Docs / Frameworks / GAISSF™

GAISSF™ Global AI Safety and Security Framework

AI safety and security controls, with the evidence each control should produce.

Version v1.0Status Final PublicationScope 9 domains · 59 controls

Start here

NOR-001GAISSF™ Framework Standard
This standard defines the authoritative GAISSF v1.0 control architecture, conformance model, evidence expectations and…NOR-003GAISSF™ Quick Start Guide
This publication edition of GAISSF-NOR-003 is designed to stand on its own for its…NOR-004GAISSF™ Control Catalogue
This catalogue reproduces the authoritative GAISSF v1.0 control library for implementation, assessment and tooling.…

Library

IDTitleTypePublishedLast revisedAccess
CRO-019GAISSF™ to ISO/IEC 42001 CrosswalkCrosswalk20265 October 2026PublicPDF ↓
CRO-020GAISSF™ to ISO/IEC 27001 CrosswalkCrosswalk20265 October 2026PublicPDF ↓
CRO-021GAISSF™ to ISO/IEC 23894 CrosswalkCrosswalk20267 October 2026PublicPDF ↓
CRO-022GAISSF™ to NIST AI RMF CrosswalkCrosswalk29 June 20267 October 2026PublicPDF ↓
CRO-023GAISSF™ to NIST CSF 2.0 CrosswalkCrosswalk29 June 20267 October 2026PublicPDF ↓
CRO-024GAISSF™ to OWASP LLM Top 10 CrosswalkCrosswalk29 June 20267 October 2026PublicPDF ↓
CRO-025GAISSF™ to MITRE ATLAS CrosswalkCrosswalk29 June 20266 October 2026PublicPDF ↓
CRO-026GAISSF™ to MITRE ATT&CK CrosswalkCrosswalk29 June 20266 October 2026PublicPDF ↓
CRO-027GAISSF™ to EU AI Act CrosswalkCrosswalk29 June 20267 October 2026PublicPDF ↓
CRO-028GAISSF™ to DORA CrosswalkCrosswalk29 June 20267 October 2026PublicPDF ↓
CRO-029GAISSF™ to NIS2 CrosswalkCrosswalk20267 October 2026PublicPDF ↓
CRO-030GAISSF™ to GDPR CrosswalkCrosswalk29 June 20267 October 2026PublicPDF ↓
CRO-031GAISSF™ to SOC 2 CrosswalkCrosswalk20267 October 2026PublicPDF ↓
CRO-032GAISSF™ to PCI DSS CrosswalkCrosswalk20267 October 2026PublicPDF ↓
CRO-033GAISSF™ to CIS Controls CrosswalkCrosswalk20267 October 2026PublicPDF ↓
CRO-034GAISSF™ to CSA CCM CrosswalkCrosswalk29 June 20267 October 2026PublicPDF ↓
CRO-035GAISSF™ to HIPAA CrosswalkCrosswalk29 June 20266 October 2026PublicPDF ↓
CRO-036GAISSF™ to FedRAMP CrosswalkCrosswalk29 June 20267 October 2026PublicPDF ↓
IMP-009GAISSF™ Adoption GuideImplementation guide29 June 202605 October 2026PublicPDF ↓
IMP-010GAISSF™ Implementation HandbookImplementation guide29 June 202605 October 2026PublicPDF ↓
IMP-011GAISSF™ Deployment PlaybookImplementation guide29 June 202605 October 2026PublicPDF ↓
IMP-012GAISSF™ Migration GuideImplementation guide29 June 202605 October 2026PublicPDF ↓
IMP-013GAISSF™ Reference ArchitectureImplementation guide29 June 202605 October 2026PublicPDF ↓
IMP-014GAISSF™ Operational HandbookImplementation guide29 June 202605 October 2026PublicPDF ↓
IMP-015GAISSF™ Frequently Asked QuestionsImplementation guide29 June 202605 October 2026PublicPDF ↓
IMP-016GAISSF™ Troubleshooting GuideImplementation guide29 June 202605 October 2026PublicPDF ↓
IMP-017GAISSF™ Evidence Collection GuideImplementation guide29 June 202605 October 2026PublicPDF ↓
IMP-018GAISSF™ Continuous Improvement GuideImplementation guide29 June 202605 October 2026PublicPDF ↓
NOR-001GAISSF™ Framework StandardStandard / reference1 July 20264 October 2026PublicPDF ↓
NOR-002GAISSF™ Executive SummaryStandard / reference1 July 20264 October 2026PublicPDF ↓
NOR-003GAISSF™ Quick Start GuideStandard / reference1 July 20264 October 2026PublicPDF ↓
NOR-004GAISSF™ Control CatalogueStandard / reference1 July 20264 October 2026PublicPDF ↓
NOR-005GAISSF™ GlossaryStandard / reference1 July 20264 October 2026PublicPDF ↓
NOR-006GAISSF™ BibliographyStandard / reference1 July 20267 October 2026PublicPDF ↓
NOR-007GAISSF™ Release NotesStandard / reference1 July 20264 October 2026PublicPDF ↓
NOR-008GAISSF™ Change LogStandard / reference1 July 20264 October 2026PublicPDF ↓
SEC-037GAISSF™ Healthcare Sector Implementation GuideSector guidance1 May 20266 October 2026PublicPDF ↓
SEC-038GAISSF™ Financial Services Sector Implementation GuideSector guidance1 May 20266 October 2026PublicPDF ↓
SEC-039GAISSF™ Insurance Sector Implementation GuideSector guidance30 June 202605 October 2026PublicPDF ↓
SEC-040GAISSF™ Defence Sector Implementation GuideSector guidance29 June 20265 October 2026PublicPDF ↓
SEC-041GAISSF™ Government Sector Implementation GuidanceSector guidance30 June 202605 October 2026PublicPDF ↓
SEC-042GAISSF™ Critical Infrastructure Sector Implementation GuideSector guidanceNot stated05 October 2026PublicPDF ↓
SEC-043GAISSF™ Education Sector Implementation GuideSector guidance30 June 202607 October 2026PublicPDF ↓
SEC-044GAISSF™ Energy Sector Implementation GuideSector guidance30 June 20266 October 2026PublicPDF ↓
SEC-045GAISSF™ Manufacturing Sector Implementation GuideSector guidance1 July 20265 October 2026PublicPDF ↓
SEC-046GAISSF™ Retail Sector Implementation GuideSector guidance1 July 20265 October 2026PublicPDF ↓
SEC-047GAISSF™ Telecommunications Sector Implementation GuideSector guidance6 October 2026 (draft publication)6 October 2026PublicPDF ↓
SEC-048GAISSF™ Legal Sector Implementation GuideSector guidanceNot stated6 October 2026PublicPDF ↓
SEC-049GAISSF™ Pharmaceutical Sector Implementation GuideSector guidance1 July 20265 October 2026PublicPDF ↓
SEC-049AGAISSF™ Pharmaceutical Sector Executive PrimerSector guidance1 July 20265 October 2026PublicPDF ↓
SEC-050GAISSF™ Aerospace Sector Implementation GuideSector guidance30 June 20266 October 2026PublicPDF ↓
SEC-051GAISSF™ Automotive Sector Implementation GuideSector guidance1 July 20265 October 2026PublicPDF ↓

Looking for a specific control? Open the GAISSF™ control finder.

Related: PAI-SF™ carries the physical-AI controls · UAIF™ describes incidents · AI-IRF™ runs the response