{"slug":"csa-aicm-star-for-ai","type":"scheme","name":"Cloud Security Alliance AI Controls Matrix and STAR for AI","shortName":"CSA STAR for AI","jurisdiction":"international","appliesTo":"provider","status":"active","sectors":["all"],"summary":"247 controls in 18 domains mapped to ISO 42001, ISO 27001, NIST AI RMF, the EU AI Act, BSI AIC4, and AIUC-1; a free matrix; a 320-question self-assessment; Level 1 self-assessment in the public STAR Registry; Level 2 via ISO 42001, ISO 27001, or SOC 2.","bodyMd":"","dates":[{"date":"2025-10-23","note":"STAR for AI launched","label":"adopted"},{"date":"2026-07-14","note":"AI Controls Matrix v1.1","label":"other"}],"officialUrl":"https://cloudsecurityalliance.org/star/ai","confirm":false,"verifiedAt":"2026-11-02","updatedAt":"2026-11-02","claimedBy":null,"watchUrl":"","url":"http://localhost:3000/crosswalk/csa-aicm-star-for-ai","jurisdiction_label":"International","rules":[{"id":22,"if":{"role":["build","both"]},"entry":"csa-aicm-star-for-ai","requirement":"Expect AI sections in enterprise vendor questionnaires; an ISO 42001 or STAR for AI pathway may be requested by customers.","appliesFrom":"ongoing","controls":["B2","B5","B13"]}],"changes":[{"date":"2026-11-02T02:55:17.363Z","summary":"Entry created from seed data.","editor":"seed"}],"posts":[]}