Maintain an AI System Inventory
Register AI systems, document their purpose and status, and maintain visibility.
AI Governance / Global
CSA STAR for AI
Build verifiable trust around your AI systems.
CSASTAR for AI
Section 1 — About CSA STAR for AI
Build verifiable trust around your AI systems.
CSA STAR for AI extends the Cloud Security Alliance’s Security, Trust, Assurance & Risk (STAR) program to AI services, giving organizations a structured path to demonstrate responsible AI security, governance and assurance.
It is built around CSA’s AI Controls Matrix (AICM) and AI-CAIQ. The current AICM v1.1 contains 247 control objectives across 18 security domains, covering AI governance, security, lifecycle risk and operational assurance.
STAR for AI provides different assurance paths, including Level 1 self-assessment through AI-CAIQ and Level 2, which combines ISO/IEC 42001 certification with a validated AI-CAIQ.
Section 2 — CSA STAR for AI with Controllo
Turn AI assurance requirements into a connected governance program.
Controllo brings your AI systems, risks, controls, policies and supporting evidence into one workspace.
Assign Ownership & Accountability
Identify accountable owners and keep responsibility clear for each AI system.
Assess AI-Specific Risk
Evaluate risks such as third-party AI exposure, shadow AI, algorithmic discrimination, privacy impact and inadequate human oversight using Controllo’s NIST AI RMF-aligned methodology.
Manage AICM Controls
Assign requirements, track implementation and document how applicable CSA AI controls are addressed.
Keep Policies & Evidence Connected
Maintain AI governance policies, procedures and supporting evidence alongside the controls they support.
Find Gaps with Secura AI
Analyze implementation descriptions, policies and evidence to identify potential gaps and receive detailed recommendations in seconds.
Leverage Framework Relationships
Use Controllo’s mappings to understand overlap with frameworks such as ISO/IEC 42001, NIST AI RMF and other AI governance standards.
Highlight
InventoryAssessImplementEvidenceAnalyzeAssure
Section 3 — Why Controllo for CSA STAR for AI?
Make AI assurance easier to manage and demonstrate.
Central AI Visibility
Know which AI systems are in use, their status and who owns them.
Risk-Based Governance
Connect AI-specific risks with relevant controls and accountable owners.
Stronger Evidence Traceability
Keep implementation and supporting documentation organized for assurance review.
Faster Gap Identification
Use Secura AI to identify incomplete implementation before assessment.
Build CSA STAR for AI readiness with Controllo.
Manage AI systems, AICM controls, risks and evidence from one connected AI governance platform.