# AI governance, evaluation, and security references

Checked September 30, 2026. This selected reference index distinguishes standards, voluntary frameworks, vendor guidance, and law. It records current issuer information for career research; it is not a certificate, conformity assessment, or complete inventory of requirements for every role.

## Coursework and research scope

Completed coursework covers Microsoft MCRA/MCSB and Zero Trust security design, OWASP Top 10 web-application security, the EU Cyber Resilience Act, secure software development, supply-chain security, and conversational AI ethics and compliance. The reference research below extends that reading into AI risk management, evaluation, disclosure, and organizational governance. A current edition listed here does not establish that it was the edition taught in a completed course.

## Official reference inventory

| Reference | Category | Status checked | Research use |
|---|---|---|---|
| [NIST AI RMF 1.0](https://airc.nist.gov/airmf-resources/airmf/0-ai-rmf-1-0/) | Framework or profile | Voluntary framework, 2023; revision in progress | Structure AI governance and evaluation decisions |
| [NIST AI 600-1 GenAI Profile](https://www.nist.gov/itl/ai-risk-management-framework/ai-risk-management-framework-resources) | Framework or profile | Published profile, 2024 | GenAI risk assessment and evaluation planning |
| [ISO/IEC 42001:2023](https://webstore.iec.ch/en/publication/90574) | Standard or standards guidance | Published AI management-system standard | Governance operations, evidence, accountability |
| [ISO/IEC 23894:2023](https://www.iso.org/fr/standard/77304.html) | Standard or standards guidance | Published AI risk-management guidance | Risk registers and treatment decisions |
| [ISO/IEC 42005:2025](https://www.iso.org/standard/42005) | Standard or standards guidance | Published AI impact-assessment guidance | Effects on people, groups, and society |
| [OWASP LLM Top 10 2026](https://genai.owasp.org/resource/owasp-genai-llm-top-10-2026/) | Community risk guide | Published community risk guide, dated August 3, 2026 | AI security architecture and evaluations |
| [OWASP Agentic Applications Top 10 2026](https://genai.owasp.org/resource/owasp-top-10-for-agentic-applications-for-2026/) | Community risk guide | Published community risk guide, dated December 9, 2025 | Tool use, memory, permissions, and agent risks |
| [MITRE ATLAS](https://atlas.mitre.org/) | Threat knowledge base | Living threat knowledge base; no fixed edition asserted | Threat-informed evaluation and defense |
| [ISO/IEC TR 29119-11:2020](https://www.iso.org/standard/79016.html) | Technical report | Published technical report; review closed March 2026 | AI test oracles, acceptance criteria, and test design |
| [ISO/IEC 24029-2:2023](https://www.iso.org/standard/79804.html) | Standard or standards guidance | Published standard for formal robustness assessment | Technical assurance of neural networks |
| [ISO/IEC 25059:2023](https://www.iso.org/fr/standard/80655.html) | Standard or standards guidance | Published AI quality-model standard; FDIS replacement pending | Define quality measures beyond accuracy |
| [NIST CSF 2.0](https://www.nist.gov/publications/nist-cybersecurity-framework-csf-20) | Framework or profile | Published cybersecurity framework, 2024 | Communicate risk, governance, and control priorities |
| [NIST SSDF 1.1, SP 800-218](https://csrc.nist.gov/pubs/sp/800/218/final) | Framework or profile | Final, 2022; [1.2 remains an initial public draft](https://csrc.nist.gov/pubs/sp/800/218/r1/ipd) on the checked page | Secure development, supply-chain evidence, procurement |
| [NIST SP 800-218A](https://www.nist.gov/publications/secure-software-development-practices-generative-ai-and-dual-use-foundation-models-ssdf) | Framework or profile | Final AI SSDF community profile, July 2024 | Secure model and AI-system development |
| [ISO/IEC 27001:2022 + Amd 1:2024](https://www.iso.org/standard/27001) | Standard or standards guidance | Published ISMS requirements and amendment | Security governance and supplier assurance |
| [OWASP Top 10:2025](https://owasp.org/projects/top-ten) | Community risk guide | Released web-application risk guide | Application security and secure design |
| [Microsoft MCRA/MCSB training](https://learn.microsoft.com/en-us/training/modules/design-solutions-microsoft-cybersecurity-cloud-security-benchmark/) | Vendor architecture and benchmark | Advanced MCRA/MCSB module; [MCSB v2 remains preview](https://learn.microsoft.com/en-us/security/benchmark/azure/introduction). Course completion does not establish edition-specific implementation. | Cloud security design, Zero Trust, insider and supply-chain risks |
| [ISO/IEC 29147:2018](https://www.iso.org/standard/72311.html) | Standard or standards guidance | Published vulnerability-disclosure standard; replacement under development | Intake, coordination, and remediation communications |
| [ISO/IEC 30111:2019](https://www.iso.org/standard/69725.html) | Standard or standards guidance | Published vulnerability-handling standard; revision under development | Triage, remediation, and verification |
| [ISO 37002:2021](https://www.iso.org/standard/65035.html) | Standard or standards guidance | Whistleblowing management guidance; confirmed in 2026 | Reporting protection, impartial assessment, escalation |
| [IEEE 7000-2021](https://standards.ieee.org/news/ieee-7000/) | Standard or standards guidance | Published ethical system-design process standard | Translate ethical concerns into requirements |
| [OECD AI Principles, updated 2024](https://www.oecd.org/en/topics/ai-principles.html) | Policy principles | Intergovernmental policy principles | International policy, transparency, accountability |
| [EU AI Act, Regulation 2024/1689](https://digital-strategy.ec.europa.eu/en/policies/regulatory-framework-ai) | Law | Law; phased application, amended timeline | EU-facing governance and evaluation roles |
| [EU Cyber Resilience Act, Regulation 2024/2847](https://digital-strategy.ec.europa.eu/en/policies/cyber-resilience-act) | Law | Law; phased application | Software product security and disclosure |
| [GDPR, Regulation 2016/679](https://eur-lex.europa.eu/legal-content/DE-EN-FR/TXT/?uri=CELEX%3A32016R0679) | Law | Law governing in-scope personal-data processing | Evaluation datasets, personal data, privacy governance |

## Application and revision notes

The ISO entries identify catalog status and scope. The review did not examine every full standard text. Standards that require paid access remain issuer-linked references; no unofficial copies are supplied.

NIST AI RMF 1.0 is the published framework while revision work continues. NIST SSDF 1.1 is final; the checked 1.2 page remains an initial public draft. MCSB v2 is preview. These statuses should be rechecked before a project adopts an edition.

The EU AI Act and Cyber Resilience Act have phased obligations. The appropriate requirements depend on the system, actor, geography, and relevant exceptions. Use the current official implementation sources when making an applicability decision: [AI Act](https://digital-strategy.ec.europa.eu/en/policies/regulatory-framework-ai), [CRA reporting](https://digital-strategy.ec.europa.eu/en/policies/cra-reporting), [CRA implementation](https://digital-strategy.ec.europa.eu/en/factpages/cyber-resilience-act-implementation). GDPR scope likewise depends on the processing and territorial conditions.

## Related career record

[Full CV](../cv.html) · [Credential and evidence ledger](source-ledger.md)

The credential ledger keeps Microsoft Applied Skills awards, course-completion certificates, and advanced learning achievements separate from this reference research.