[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"framework:iso\u002F42001":3},{"item":4,"lessons":16,"controls":66,"related":96},{"family":5,"item":6,"code":7,"title":8,"citations":9,"publisher":10,"summary_md":11,"official_text":12,"official_attribution":12,"official_url":13,"link_label":14,"note":12,"updated_at":15},"iso","42001","ISO\u002FIEC 42001","ISO\u002FIEC 42001: Artificial intelligence management system",122,"International Organization for Standardization (ISO) and IEC","**What it covers.** Published in 2023, this is the first international management system standard for artificial intelligence. It sets requirements for establishing, maintaining and improving an AI management system for organisations that develop, provide or use AI systems, with an annex of controls and guidance on responsible AI.\n\n**In practice.** Organisations define the scope of AI use, assign accountability, assess AI risks and impacts on individuals and society, and apply controls across the AI system life cycle, including data quality, transparency and human oversight. It follows the same management system structure as ISO\u002FIEC 27001, so it can be integrated with an existing ISMS. It is often used to support preparation for obligations such as the EU AI Act. Auditors expect an AI inventory, impact assessments and evidence of monitoring.\n\n**Common gaps.** Common gaps are an incomplete inventory of AI use, including shadow tools, and impact assessments done once and never updated.",null,"https:\u002F\u002Fwww.iso.org\u002Fisoiec-27001-information-security.html","See the standard at ISO","2026-10-18T15:18:43.663+00:00",{"total":9,"list":17},[18,22,26,30,34,38,42,46,50,54,58,62],{"slug":19,"title":20,"published_at":21},"nist-nsa-cisa-issue-guidance-on-ai-incident-readiness-for-high-risk-ai-systems","NIST, NSA & CISA Issue Guidance on AI Incident Readiness for High-Risk AI Systems","2026-10-16T18:21:54.014+00:00",{"slug":23,"title":24,"published_at":25},"governing-open-weight-ai-models-requires-structured-enterprise-risk-frameworks","Governing Open-Weight AI Models Requires Structured Enterprise Risk Frameworks","2026-10-16T18:21:38.63+00:00",{"slug":27,"title":28,"published_at":29},"ai-model-misappropriates-third-party-crypto-funds-to-complete-task","AI Model Misappropriates Third-Party Crypto Funds to Complete Task","2026-10-16T16:20:58.749+00:00",{"slug":31,"title":32,"published_at":33},"unauthorised-ai-agent-actions-expose-gaps-in-governance-and-oversight","Unauthorised AI Agent Actions Expose Gaps in Governance and Oversight","2026-10-14T18:22:00.668+00:00",{"slug":35,"title":36,"published_at":37},"senators-push-for-federal-ai-safety-standards-amid-security-breaches","Senators Push for Federal AI Safety Standards Amid Security Breaches","2026-10-14T16:20:32.423+00:00",{"slug":39,"title":40,"published_at":41},"anthropic-disables-ai-internet-access-after-claude-exploits-injection-flaws-in-live-systems","Anthropic Disables AI Internet Access After Claude Exploits Injection Flaws in Live Systems","2026-10-10T10:20:22.03+00:00",{"slug":43,"title":44,"published_at":45},"ai-agents-are-the-new-bec-target-social-engineering-evolves","AI Agents Are the New BEC Target: Social Engineering Evolves","2026-10-09T14:20:26.055+00:00",{"slug":47,"title":48,"published_at":49},"mathematical-formula-reveals-ai-chatbot-rogue-output-tipping-points","Mathematical Formula Reveals AI Chatbot 'Rogue Output' Tipping Points","2026-10-09T06:20:39.603+00:00",{"slug":51,"title":52,"published_at":53},"ai-powered-threats-demand-proactive-defense-and-secure-ai-integration","AI-Powered Threats Demand Proactive Defense and Secure AI Integration","2026-10-01T16:22:47.478+00:00",{"slug":55,"title":56,"published_at":57},"ai-model-reasoning-extraction-thwarted-via-account-manipulation","AI Model Reasoning Extraction Thwarted via Account Manipulation","2026-10-01T12:21:04.728+00:00",{"slug":59,"title":60,"published_at":61},"ftc-probes-openai-anthropic-over-ai-agent-safety-and-consumer-risks","FTC Probes OpenAI & Anthropic Over AI Agent Safety and Consumer Risks","2026-10-01T00:20:23.357+00:00",{"slug":63,"title":64,"published_at":65},"ai-model-bypasses-scope-to-stage-supply-chain-attacks-via-fake-github-activity","AI Model Bypasses Scope to Stage Supply Chain Attacks via Fake GitHub Activity","2026-09-30T22:21:00.298+00:00",[67,72,77,82,87,91],{"slug":68,"name":69,"problem":70,"stories":71},"ai-security","AI application security","Prompt injection, data leaks through AI tools and unapproved AI use get caught.",90,{"slug":73,"name":74,"problem":75,"stories":76},"endpoint-detection-response","Endpoint detection and response (EDR and XDR)","Malware and hands-on-keyboard attackers on laptops and servers get spotted and stopped.",15,{"slug":78,"name":79,"problem":80,"stories":81},"data-loss-prevention","Data loss prevention (DLP)","Sensitive data cannot quietly leave by email, upload, USB stick or AI tool.",13,{"slug":83,"name":84,"problem":85,"stories":86},"breach-attack-simulation","Breach and attack simulation","You only find out whether your security tools stop an attack when a real attacker tries.",10,{"slug":88,"name":89,"problem":90,"stories":86},"network-segmentation","Network segmentation and microsegmentation","One compromised machine can no longer reach everything else.",{"slug":92,"name":93,"problem":94,"stories":95},"privileged-access-management","Privileged access management (PAM)","Admin accounts stop being one stolen password away from control of everything.",8,[97,102,106,112,117,123,128,134],{"family":98,"item":99,"code":100,"title":101,"together":9},"nist-ai-rmf","overview","AI RMF 1.0","AI Risk Management Framework (AI RMF 1.0)",{"family":103,"item":99,"code":104,"title":104,"together":105},"itil","ITIL",50,{"family":107,"item":108,"code":109,"title":110,"together":111},"cis","8","Control 8","Audit Log Management",49,{"family":107,"item":113,"code":114,"title":115,"together":116},"3","Control 3","Data Protection",48,{"family":118,"item":119,"code":120,"title":121,"together":122},"gdpr","25","Article 25","Data protection by design and by default",44,{"family":107,"item":124,"code":125,"title":126,"together":127},"16","Control 16","Application Software Security",41,{"family":129,"item":130,"code":131,"title":132,"together":133},"nist-800-53","ac-6","AC-6","Least Privilege",38,{"family":107,"item":135,"code":136,"title":137,"together":138},"6","Control 6","Access Control Management",33]