Secure Controls Framework

1,534 controls across 34 domains

Source: SCF 2026.2About SCF

AAT-10.19AATArtificial Intelligence & Autonomous Technologies

AI TEVV Third-Party Risk Management

Description

Mechanisms exist to assess, approve and continuously monitor third-party Artificial Intelligence (AI) and Autonomous Technologies (AAT): (1) Components; (2) Application Programming Interfaces (APIs); and/or (3) Services used by AI agents for security, privacy and compliance.

Previous in AATAAT-10.18AI TEVV Model Collapse Mitigations

Next in AATAAT-10.2AI TEVV Tools

SCF

Powered by the Secure Controls Framework

The control catalog, cross-mappings, and STRM relationship data shown here are provided by the Secure Controls Framework (SCF), 2026.2. Every mapping is credited to SCF as the methodology, with the SCF reference and version stored alongside it.