AIUC-1 Standard

→

→

F001. Prevent AI cyber misuse

F001

Prevent AI cyber misuse

Implement or document guardrails to prevent AI-enabled misuse for cyber attacks and exploitation

Keywords

Cyber Attacks

Application

Mandatory

Frequency

Every 12 months

Type

Preventative

Crosswalks

MEASURE 2.7: Security and resilience

A.5.5: Assessing societal impacts of AI systems

GRC-02: Risk Management Program

GRC-09: Acceptable Use of the AI Service

GRC-10: AI Impact Assessment

GRC-12: Ethics Committee

TVM-11: Guardrails

Control activities

Typical evidence

Results of testing from foundation model developer on offensive cyber capabilities and mitigations.

F001.1 Documentation: Foundation model cyber capabilities

Provider model cards, cybersecurity assessment reports from model developers, or foundation model documentation describing offensive cyber capabilities and mitigations

Category

Vendor Contracts

Text-generationAutomationVoice-generation

Implementing malicious use detection and blocking. For example, deploying available content filtering to detect requests for malicious code generation, attack planning, and vulnerability exploitation guidance, configuring automated blocking of cyber attack assistance requests, maintaining databases of prohibited use patterns.

F001.2 Config: Cyber use detection

Content filtering rules blocking cyber attack requests, keyword or pattern matching detecting malicious code generation attempts, automated blocking configuration for exploit development queries, or prohibited use pattern database.

Category

Technical Implementation

Engineering Code

Text-generationAutomationVoice-generation

Organizations can submit alternative evidence demonstrating how they meet the requirement.

AIUC-1 is built with industry leaders

Phil Venables

"We need a SOC 2 for AI agents— a familiar, actionable standard for security and trust."

Phil Venables

Former CISO of Google Cloud

Dr. Christina Liaghati

"Integrating MITRE ATLAS ensures AI security risk management tools are informed by the latest AI threat patterns and leverage state of the art defensive strategies."

Dr. Christina Liaghati

MITRE ATLAS lead

Hyrum Anderson

"Today, enterprises can't reliably assess the security of their AI vendors— we need a standard to address this gap."

Hyrum Anderson

Senior Director, Security & AI

Prof. Sanmi Koyejo

"Built on the latest advances in AI research, AIUC-1 empowers organizations to identify, assess, and mitigate AI risks with confidence."

Prof. Sanmi Koyejo

Lead for Stanford Trustworthy AI Research

John Bautista

"AIUC-1 standardizes how AI is adopted. That's powerful."

John Bautista

Partner at Orrick

Lena Smart

"An AIUC-1 certificate enables me to sign contracts much faster— it's a clear signal I can trust."

Lena Smart

Head of Trust for SecurityPal and former CISO of MongoDB