AAT — Artificial Intelligence & Autonomous Technologies
156 controls in the Artificial Intelligence & Autonomous Technologies domain
AAT-01Artificial Intelligence (AI) & Autonomous Technologies Governance
AAT-01.1AI & Autonomous Technologies-Related Legal Requirements Definition
AAT-01.2Trustworthy AI & Autonomous Technologies
AAT-01.3AI & Autonomous Technologies Value Sustainment
AAT-01.4AI Model & Agent Inventory & Lifecycle Management
AAT-02Situational Awareness of AI & Autonomous Technologies
AAT-02.1AI & Autonomous Technologies Risk Mapping
AAT-02.2AI & Autonomous Technologies Internal Controls
AAT-02.3Adequate Protections For AI & Autonomous Technologies
AAT-02.4AI Threat Modeling & Risk Assessment
AAT-03AI & Autonomous Technologies Context Definition
AAT-03.1AI & Autonomous Technologies Mission and Goals Definition
AAT-03.2Model & AI Agent Documentation
AAT-04AI & Autonomous Technologies Business Case
AAT-04.1AI & Autonomous Technologies Potential Benefits Analysis
AAT-04.2AI & Autonomous Technologies Potential Costs Analysis
AAT-04.3AI & Autonomous Technologies Targeted Application Scope
AAT-04.4AI & Autonomous Technologies Cost / Benefit Mapping
AAT-05AI & Autonomous Technologies Training
AAT-06AI & Autonomous Technologies Fairness & Bias
AAT-07AI & Autonomous Technologies Risk Management Decisions
AAT-07.1AI & Autonomous Technologies Impact Assessment
AAT-07.2AI & Autonomous Technologies Likelihood & Impact Risk Analysis
AAT-07.3AI & Autonomous Technologies Continuous Improvements
AAT-08Assigned Responsibilities for AI & Autonomous Technologies
AAT-09AI & Autonomous Technologies Risk Profiling
AAT-09.1AI & Autonomous Technologies High Risk Designations
AAT-10Artificial Intelligence Test, Evaluation, Validation & Verification (AI TEVV)
AAT-10.1AI TEVV Trustworthiness Assessment
AAT-10.2AI TEVV Tools
AAT-10.3AI TEVV Trustworthiness Demonstration
AAT-10.4AI TEVV Safety Demonstration
AAT-10.5AI TEVV Security & Resiliency Assessment
AAT-10.6AI TEVV Transparency & Accountability Assessment
AAT-10.7AI TEVV Privacy Assessment
AAT-10.8AI TEVV Fairness & Bias Assessment
AAT-10.9AI & Autonomous Technologies Model Validation
AAT-10.10AI TEVV Results Evaluation
AAT-10.11AI TEVV Effectiveness
AAT-10.12AI TEVV Comparable Deployment Settings
AAT-10.13AI TEVV Post-Deployment Monitoring
AAT-10.14Updating AI & Autonomous Technologies
AAT-10.15AI TEVV Reporting
AAT-10.16AI TEVV Empirically Validated Methods
AAT-10.17AI TEVV Benchmarking Content Provenance
AAT-10.18AI TEVV Model Collapse Mitigations
AAT-10.19AI TEVV Third-Party Risk Management
AAT-11Robust Stakeholder Engagement for AI & Autonomous Technologies
AAT-11.1AI & Autonomous Technologies Stakeholder Feedback Integration
AAT-11.2AI & Autonomous Technologies Ongoing Assessments
AAT-11.3AI & Autonomous Technologies End User Feedback
AAT-11.4AI & Autonomous Technologies Incident & Error Reporting
AAT-12AI & Autonomous Technologies Intellectual Property Infringement Protections
AAT-12.1Data Source Identification
AAT-12.2Data Source Integrity
AAT-12.3Data Source Lineage & Origin Disclosure
AAT-12.4Digital Content Modification Logging
AAT-13AI & Autonomous Technologies Stakeholder Diversity
AAT-13.1AI & Autonomous Technologies Stakeholder Competencies
AAT-14AI & Autonomous Technologies Requirements Definitions
AAT-14.1AI & Autonomous Technologies Implementation Tasks Definition
AAT-14.2AI & Autonomous Technologies Knowledge Limits
AAT-15AI & Autonomous Technologies Viability Decisions
AAT-15.1AI & Autonomous Technologies Negative Residual Risks
AAT-15.2Responsibility To Supersede, Deactivate and/or Disengage AI & Autonomous Technologies
AAT-16AI & Autonomous Technologies Production Monitoring
AAT-16.1AI & Autonomous Technologies Measurement Approaches
AAT-16.2Measuring AI & Autonomous Technologies Effectiveness
AAT-16.3Unmeasurable AI & Autonomous Technologies Risks
AAT-16.4Efficacy of AI & Autonomous Technologies Measurement
AAT-16.5AI & Autonomous Technologies Domain Expert Reviews
AAT-16.6AI & Autonomous Technologies Performance Changes
AAT-16.7Pre-Trained AI & Autonomous Technologies Models
AAT-16.8AI & Autonomous Technologies Event Logging
AAT-16.9Serious Incident Reporting For AI & Autonomous Technologies
AAT-16.10Serious Incident Root Cause Analysis (RCA) For AI & Autonomous Technologies
AAT-16.11Anomaly Detection & Human Oversight
AAT-16.12Human-in-the-Loop & Escalation
AAT-16.13Emergent Behavior & Collusion Protections
AAT-16.14Multi-Agent Trust & Communication Validation
AAT-17AI & Autonomous Technologies Harm Prevention
AAT-17.1AI & Autonomous Technologies Human Subject Protections
AAT-17.2AI & Autonomous Technologies Environmental Impact & Sustainability
AAT-17.3Previously Unknown AI & Autonomous Technologies Threats & Risks
AAT-17.4Novel Risk Assessment Methods & Technologies
AAT-17.5Fine Tuning Risk Mitigation
AAT-18AI & Autonomous Technologies Risk Tracking Approaches
AAT-18.1AI & Autonomous Technologies Risk Response
AAT-19AI & Autonomous Technologies Conformity
AAT-19.1Manipulative or Deceptive Techniques
AAT-19.2Materially Distorting Behaviors
AAT-19.3Social Scoring
AAT-19.4Detrimental or Unfavorable Treatment
AAT-19.5Risk and Criminal Profiling
AAT-19.6Populating Facial Recognition Databases
AAT-19.7Emotion Inference
AAT-19.8Biometric Categorization
AAT-20AI & Autonomous Technologies Development Practices
AAT-20.1AI & Autonomous Technologies Transparency
AAT-20.2AI & Autonomous Technologies Implementation Documentation
AAT-20.3AI & Autonomous Technologies Human Domain Knowledge Reliance
AAT-21AI & Autonomous Technologies Registration
AAT-22AI & Autonomous Technologies Deployment
AAT-22.1AI & Autonomous Technologies Human Oversight
AAT-22.2AI & Autonomous Technologies Oversight Measures
AAT-22.3AI & Autonomous Technologies Separate Verification
AAT-22.4AI & Autonomous Technologies Oversight Functions Competency
AAT-22.5AI & Autonomous Technologies Data Relevance
AAT-22.6AI & Autonomous Technologies Irregularity Reporting
AAT-22.7AI & Autonomous Technologies Use Notification To Employees
AAT-22.8AI & Autonomous Technologies Use Notification To Users
AAT-23AI & Autonomous Technologies Output Marking
AAT-24Real World Testing of AI & Autonomous Technologies
AAT-25AI & Autonomous Technologies System Value Chain
AAT-25.1AI & Autonomous Technologies System Value Chain Fallbacks
AAT-26AI & Autonomous Technologies Testing Techniques
AAT-26.1Generative Artificial Intelligence (GAI) Identification
AAT-26.2AI & Autonomous Technologies Capabilities Testing
AAT-26.3Real-World Testing
AAT-26.4Documenting Testing Guidance
AAT-27AI & Autonomous Technologies Output Filtering
AAT-27.1Human Moderation
AAT-28AI Model Resilience
AAT-28.1Model Pollution
AAT-28.2Cascading Hallucination Defense
AAT-28.3Resource Exhaustion & DoS Resilience
AAT-29AI Agent Governance
AAT-29.1Infrastructure Hardening & Isolation
AAT-29.2AI Agent Limitations
AAT-29.3Tool & API Invocation Controls
AAT-29.4Orchestration Protocol Safeguards
AAT-29.5Data Pipeline & Input Integrity
AAT-29.6Privileged Role & Delegation Boundaries
AAT-29.7AI Agent Data Access Restrictions
AAT-29.8Data Extraction
AAT-29.9AI Agent Identity & Impersonation Defense
AAT-29.10AI Agent Logic Integrity
AAT-29.11Sandboxing AI Agents
AAT-29.12Prompt Injection Defense
AAT-29.13Agent Kill Switch / User Control
AAT-29.14Adversarial & Red Team Testing
AAT-29.15Self-Modification Controls
AAT-29.16Purging AI Agent Data
AAT-29.17Delegation and Chaining Control
AAT-29.18Behavioral Drift Detection
AAT-29.19AI Agent Action Authentication & Authorization
AAT-29.20Transparency & Audit
AAT-29.21Explainability
AAT-29.22Ethics, Fairness & Bias Detection
AAT-29.23Agent Output Integrity & Verification
AAT-30Agentic Output Traceability & Repudiation
AAT-30.1AI Agent Logging
AAT-30.2Session Management
AAT-31Human-in-the-Loop Workload & Manipulation
AAT-32Robotic Process Automation (RPA)
AAT-32.1Business Process Task Enumeration