Artificial Intelligence and Autonomous Technologies (AAT) & AI Agent Categorization
Description
Mechanisms exist to assign defined classes to Artificial Intelligence and Autonomous Technologies (AAT) and AI agents based on their characteristics (e.g., intended use, autonomy, access, potential impact and risk) to determine applicable: (1) Approval requirements; (2) Security, compliance and/or resilience controls; (3) Testing rigor; (4) Monitoring requirements; (5) Supporting documentation; and (6) Oversight requirements.
Powered by the Secure Controls Framework
The control catalog, cross-mappings, and STRM relationship data shown here are provided by the Secure Controls Framework (SCF), 2026.2. Every mapping is credited to SCF as the methodology, with the SCF reference and version stored alongside it.
© SCF Council, LLC. Secure Controls Framework content is free and shown here with attribution. securecontrolsframework.com · About SCF on STIGViewer