LLM AI サイバーセキュリティとガバナンスのチェックリスト 〜 失敗しない大規模言語モデル導入のために 〜
A Japanese-language OWASP checklist for governing and securing LLM applications. It sets out adoption steps, implementation questions, LLM risks, and references to OWASP and MITRE resources.
Every reviewed AI governance resource in one place — reports, standards, guidance and regulation.
A Japanese-language OWASP checklist for governing and securing LLM applications. It sets out adoption steps, implementation questions, LLM risks, and references to OWASP and MITRE resources.
This ENISA Research and Innovation Brief examines AI for cybersecurity and the security of AI systems. It maps methods, use cases, threats, research gaps and five proposed research needs.
This ENISA report maps standards and standardisation activity relevant to the cybersecurity of AI. It assesses coverage and gaps across the CIA model, AI trustworthiness and the draft AI Act.
This report maps the AI cybersecurity ecosystem through an AI lifecycle, asset taxonomy and threat taxonomy. It identifies 74 threats, their affected assets and potential impacts on security properties.
This ENISA report presents a three-layer framework for securing AI systems through ICT cybersecurity foundations, AI-specific measures and sectoral practices. It also reports findings from a survey of EU national competent authorities.
This country profile describes Singapore’s approach to AI regulation, voluntary governance tools, assurance initiatives and AI standardisation. It maps key policies, institutions and national and international standards activity using primary sources.
This ENISA report maps machine-learning algorithms, threats, vulnerabilities and security controls across the ML lifecycle. It provides operational implementation examples drawing on ISO 27001/2, NIST 800-53 and ML-security literature.
ENISA provides non-binding technical implementation guidance for cybersecurity risk-management requirements under Commission Implementing Regulation (EU) 2024/2690. It offers implementation advice, indicative evidence and mappings to standards and national frameworks.
This guide presents evaluation perspectives, example risks and example evaluation items for AI safety in LLM systems. It also covers evaluation roles, lifecycle timing, technical and managerial methods, and considerations for multimodal systems.
This international scientific assessment synthesises evidence on general-purpose AI capabilities, emerging risks, and risk-management approaches. It focuses on frontier risks from misuse, malfunctions, and systemic effects.
An 81-page report examining the socio-technical influences of generative AI through literature research and interviews. It organises 12 topics across ethics and law, economic activities, information space and environment, and outlines possible responses.
An annual report that compiles global indicators on AI research, technical performance, responsible AI, economic and social effects, and governance. It provides data, charts, and chapter-level findings intended to inform decisions about AI.
A voluntary framework for organisations deploying AI at scale. It sets out governance, human-oversight, operational and stakeholder-communication measures for responsible AI use.
This chapter of the AI Index Report 2026 examines global AI policy developments, national strategies, sovereignty, legislation, US regulation, and public investment. It uses comparative datasets and a timeline of developments through 2025.
A practical self-assessment guide for organizations deploying AI, developed to complement Singapore’s voluntary Model AI Governance Framework. It provides questions, implementation considerations and industry examples across governance, oversight, operations and stakeholder communication.
This NIST report defines four principles for explainable AI systems: Explanation, Meaningful, Explanation Accuracy, and Knowledge Limits. It reviews explanation purposes and styles, risks, algorithm categories, evaluation approaches, and human explanations as a comparison group.
This research agenda sets out the AI Security Institute’s current priorities for understanding, evaluating and mitigating risks from advanced AI. It describes risk domains, evaluation methods, safeguards, control and alignment research directions.
An NIST Special Publication that frames AI bias as a socio-technical risk. It defines systemic, statistical and computational, and human bias, and offers preliminary guidance on datasets, TEVV, human factors, and governance.
A voluntary, use-case-agnostic framework for organisations managing risks from the design, development, deployment and use of AI systems. It sets out trustworthiness characteristics and four functions—GOVERN, MAP, MEASURE and MANAGE—for continuous AI risk management.
This report synthesises AI Security Institute evaluations of frontier AI systems across autonomy, cyber, chemistry and biology, safeguards, loss of control, societal impacts and open-source models. It presents trends, methods and limitations from its testing.
This report surveys the UK AI assurance market, its barriers to growth and its future potential. It sets out government actions to increase demand, strengthen third-party assurance supply and improve interoperability.
This NCSC guidance explains the benefits and cyber security risks of AI tools for non-technical managers, board members and senior executives. It outlines AI-specific vulnerabilities and provides questions for organisational discussions about AI/ML security.
A practical framework for public-sector teams to identify and mitigate ethical risks in data and AI projects. It sets out eight Fundamentals, six Conditions and an ethical red-teaming workshop process.
Country profile surveying the UK’s AI regulatory approach, policy initiatives, sectoral oversight and standardisation system. It maps voluntary principles, assurance activity, AI safety efforts, and engagement with international standards.
Curated Library of AI Governance Resources