AI Governance Engineer
GitHub

AICM

By Updated

The CSA AI Controls Matrix, a control framework (v1.1, 247 control objectives across 18 domains) that maps to ISO 42001, ISO 27001 and NIST AI RMF and underpins STAR for AI 1.

Developed in
ch. 08, CSA AICM and STAR for AI
Chapters
ch. 08, Regulatory Map
Source
1 numbered reference, listed below

Where it is used

4 chapters of the Body of Knowledge use the term. Each link opens the first section that does.

AICM: mentions per chapter18 mentions of the term across 4 of the 23 chapters of the Body of Knowledge; the chapters the glossary cross-references are drawn solid.Cross-referenced chapterOther chapter04 The Stack: 6 mentions04 The Stack607 Maturity Model: 2 mentions07 Maturity Model208 Regulatory Map: 9 mentions08 Regulatory Map923 AI Agents: 1 mention23 AI Agents1No mentions in the other 19 chaptersSource: the Body of Knowledgev0.5.0
AICM: mentions per chapter18 mentions of the term across 4 of the 23 chapters of the Body of Knowledge; the chapters the glossary cross-references are drawn solid.Cross-referenced chapterOther chapter0001020304 The Stack: 6 mentions604050607 Maturity Model: 2 mentions20708 Regulatory Map: 9 mentions9081011121314151617181920212223 AI Agents: 1 mention123Source: the Body of Knowledge v0.5.0
Mentions per chapter How often each chapter names the term, with the chapters the glossary cross-references drawn solid. The longest bar is where to read the term in use; bars spread across many chapters mark a term that runs through the discipline.
Mentions as a table
Mentions of AICM per chapter
ChapterMentionsCross-referenced
00 Preface0No
01 Definition0No
02 Why Now0No
03 Values & Principles0No
04 The Stack6No
05 Patterns0No
06 The Role0No
07 Maturity Model2No
08 Regulatory Map9Yes
10 Reading List0No
11 AI Defined0No
12 Governance Program0No
13 Risk Management0No
14 Development0No
15 Deployment0No
16 Fairness & XAI0No
17 Incidents0No
18 EU AI Act0No
19 Privacy & AI0No
20 Existing Law0No
21 AI Laws Worldwide0No
22 Principles & Standards0No
23 AI Agents1No

Patterns that use this term

8 pattern pages use the term, most mentions first.

AICM: related terms and patternsThe term at the centre; related terms on solid edges, the terms it is contrasted with on dashed edges, and the patterns that use it most in the colour of their layer.RelatedColour: stack layer of the pattern01 Govern-as-Code02 Inventory04 Runtime Controls05 AssuranceAICMRelated terms (3)ISO/IEC 42001 · RelatedISO/IEC 42001NIST AI RMF · RelatedNIST AI RMFSTAR for AI · RelatedSTAR for AIPatterns using it most (6)AIBOM, 2 mentions · Uses the termAIBOMAgent Registry, 2 mentions · Uses the termAgent RegistryContinuous Assurance Telemetry, 2 mentions · Uses the termContinuous Assurance TelemetryFramework Crosswalk, 4 mentions · Uses the termFramework CrosswalkKill Switch / Circuit Breaker, 2 mentions · Uses the termKill Switch / Circuit BreakerPolicy Card, 2 mentions · Uses the termPolicy Card
AICM: related terms and patternsThe term at the centre; related terms on solid edges, the terms it is contrasted with on dashed edges, and the patterns that use it most in the colour of their layer.RelatedColour: stack layer of the pattern01 Govern-as-Code02 Inventory04 Runtime Controls05 AssuranceRelated terms (3)ISO/IEC 42001 · RelatedISO/IEC 42001NIST AI RMF · RelatedNIST AI RMFSTAR for AI · RelatedSTAR for AIPatterns using it most (6)AIBOM, 2 mentions · Uses the termAIBOMAgent Registry, 2 mentions · Uses the termAgent RegistryContinuous Assurance Telemetry, 2 mentions · Uses the termContinuous Assurance TelemetryFramework Crosswalk, 4 mentions · Uses the termFramework CrosswalkKill Switch / Circuit Breaker, 2 mentions · Uses the termKill Switch / Circuit BreakerPolicy Card, 2 mentions · Uses the termPolicy CardAICM
The term's neighbourhood Terms related to this one on solid edges, terms it is often confused with on dashed edges, and the patterns that use it most in the colour of their layer. Follow a dashed edge to check the distinction before you use either term.
Neighbourhood as a table
Neighbourhood of AICM
FamilyItemRelation
Related termsISO/IEC 42001Related
Related termsNIST AI RMFRelated
Related termsSTAR for AIRelated
Patterns using it mostAIBOM, 2 mentionsUses the term
Patterns using it mostAgent Registry, 2 mentionsUses the term
Patterns using it mostContinuous Assurance Telemetry, 2 mentionsUses the term
Patterns using it mostFramework Crosswalk, 4 mentionsUses the term
Patterns using it mostKill Switch / Circuit Breaker, 2 mentionsUses the term
Patterns using it mostPolicy Card, 2 mentionsUses the term
  • STAR for AI

    CSA's security assurance and certification programme for AI, built on the AICM, with a self-assessment tier, an automated "Valid-AI-ted" tier and a Level 2…

  • ISO/IEC 42001

    The ISO/IEC standard (2023) that specifies requirements for an AI management system, certifiable by accredited bodies.

  • NIST AI RMF

    The NIST Artificial Intelligence Risk Management Framework 1.0 (NIST AI 100-1, January 2023): voluntary guidance organised as a Core of four functions…

Sources

  1. [1] AI Controls Matrix v1.1 (247 control objectives, 18 domains) and STAR for AI. Cloud Security Alliance. 2026-06-22. https://cloudsecurityalliance.org/star/ai (verified: primary)

Definitions of legal terms paraphrase the cited text, which governs. Dated statements are as of .

Cite this term

García Aibar, J. (2026). AICM. In AI Governance Engineering: The Thesis & Body of Knowledge (v0.5.0), Glossary. https://doi.org/10.5281/zenodo.22956197. https://aigovernanceengineer.com/glossary/aicm. CC BY 4.0

BibTeX

@misc{aige2026aicm,
  author  = {Jorge García Aibar},
  title   = {{AICM}},
  note    = {Glossary, AI Governance Engineering: The Thesis \& Body of Knowledge, version 0.5.0},
  year    = {2026},
  doi     = {10.5281/zenodo.22956197},
  url     = {https://aigovernanceengineer.com/glossary/aicm}
}