ISO/IEC 42001:2023 published: the first AI management system standard
18 Dec 2023
ISO has published ISO/IEC 42001, the world’s first certifiable management system standard for artificial intelligence.
Updates to the standards and frameworks we consult and audit against.
ISO has published ISO/IEC 42001, the world’s first certifiable management system standard for artificial intelligence.
The Centre for Cybersecurity Belgium has published CyberFundamentals 2023, positioning CyFun as a route to demonstrating NIS2 compliance.
NIST has released a voluntary framework to help organisations manage the risks of artificial intelligence and build trustworthy AI.
HITRUST releases CSF v11, aligning its e1, i1 and r2 assessments and adding NIST SP 800-53 Rev. 5 as a source.
The third edition of ISO/IEC 27001 has been published, with Annex A aligned to ISO/IEC 27002:2022 and a three-year transition period.
The PCI Security Standards Council publishes PCI DSS v4.0, the first major update to the card data security standard since 2018.
ANSSI publishes SecNumCloud 3.2, introducing requirements to protect trusted cloud services from non-EU extraterritorial laws.
The revised code of practice for information security controls restructures 114 controls into 93, organised in four themes.
The biggest update to Cyber Essentials since its launch brings cloud services, home working and multi-factor authentication into focus.
The Center for Internet Security launches CIS Controls v8, consolidating the controls into 18 groups reflecting cloud and remote working.
The Cloud Security Alliance releases Cloud Controls Matrix v4, adding a logging and monitoring domain and more than 60 new controls.
NIST has published a major revision of its security and privacy control catalogue.