Standards we build against.

Independent audit for security, availability, and operational controls.

Global standard for information security management systems.

Management standard for responsible AI governance and oversight.

Guidance for identifying, assessing, and managing AI-related risks.

Best-practice catalog for implementing information security controls.

Security guidance for cloud services and cloud service providers.

Privacy guidance for protecting personal data in cloud environments.

Voluntary framework for managing trustworthy AI risks.

Software security maturity model for secure development programs.

Readiness work for AI regulation, transparency, oversight, and risk controls.

Readiness work for privacy, lawful processing, transparency, and data rights.