SchemeInternationalActiveVerified Nov 2, 2026
Cloud Security Alliance AI Controls Matrix and STAR for AI
CSA STAR for AI
Summary
247 controls in 18 domains mapped to ISO 42001, ISO 27001, NIST AI RMF, the EU AI Act, BSI AIC4, and AIUC-1; a free matrix; a 320-question self-assessment; Level 1 self-assessment in the public STAR Registry; Level 2 via ISO 42001, ISO 27001, or SOC 2.
Who it applies to
Role: provider. Sectors: all. Territory: International.
Key dates
Oct 23, 2025STAR for AI launched (adopted)
Jul 14, 2026AI Controls Matrix v1.1 (other)
Obligations at a glance
Expect AI sections in enterprise vendor questionnaires; an ISO 42001 or STAR for AI pathway may be requested by customers.
Applies from ongoing · Baseline B2, B5, B13
Applies from ongoing · Baseline B2, B5, B13
See how these apply to you with What applies to me.
Official sources
On the Wire
No Wire items yet.
Change log
Nov 2, 2026Entry created from seed data. (seed)
Next date
No upcoming dates.
Is this yours?
Organizations can claim their entry and keep it accurate. Anyone can suggest a correction.
Claim this entrySuggest a correctionLicence
Entry data is ODbL 1.0. Cite as: AI Governance Commons by Synthetic Labs, CSA STAR for AI, retrieved Nov 4, 2026.
JSON