Library / I&S

I&S

Infrastructure Security

Domain definition — mapping in progress (source: AI Controls Matrix (AICM) Introductory Guidance).

Control objectives

169

Skills

Cross-cutting

—

Objectives fitted

AISMM maturity context

Infrastructure Security and Resilience · Structural domain

L1 InitialL2 RepeatableL3 DefinedL4 CapableL5 Efficient

A lens, not a partition. How AISMM adoption works →

Control objectives

The exact things this domain must do. Each carries an authoritative crosswalk to 3 external control sets (Cloud Security Alliance (CSA) AI Controls Matrix (AICM) v1.1.0). Fitted skills are drawn from the pool below as fits are evidenced.

Infrastructure and Virtualization Security Policy and ProceduresI&S-01

Crosswalk

ISO/IEC 42001EU AI ActBSI AIC4

Implementation & auditing guidance

Shared implementation — 3 steps

Cloud Service Provider — 9 steps

Application Provider — 6 steps

Model Provider — 6 steps

Orchestrated Services Provider — 6 steps

Verbatim Cloud Security Alliance (CSA) implementation & auditing steps are available to the owner.

Fitted skill — mapping in progress. Candidates are drawn from this domain’s skill pool below.

Capacity and Resource PlanningI&S-02

Crosswalk

ISO/IEC 42001EU AI ActBSI AIC4

Implementation & auditing guidance

Shared implementation — 11 steps

Cloud Service Provider — 7 steps

Application Provider — 4 steps

Model Provider — 5 steps

Orchestrated Services Provider — 4 steps

Verbatim Cloud Security Alliance (CSA) implementation & auditing steps are available to the owner.

Fitted skill — mapping in progress. Candidates are drawn from this domain’s skill pool below.

Network SecurityI&S-03

Crosswalk

ISO/IEC 42001EU AI ActBSI AIC4

Implementation & auditing guidance

Shared implementation — 10 steps

Cloud Service Provider — 10 steps

Application Provider — 5 steps

Model Provider — 5 steps

Orchestrated Services Provider — 5 steps

Verbatim Cloud Security Alliance (CSA) implementation & auditing steps are available to the owner.

Fitted skill — mapping in progress. Candidates are drawn from this domain’s skill pool below.

OS Hardening and Base ControlsI&S-04

Crosswalk

ISO/IEC 42001EU AI ActBSI AIC4

Implementation & auditing guidance

Shared implementation — 9 steps

Cloud Service Provider — 10 steps

Application Provider — 5 steps

Model Provider — 5 steps

Orchestrated Services Provider — 5 steps

Verbatim Cloud Security Alliance (CSA) implementation & auditing steps are available to the owner.

Fitted skill — mapping in progress. Candidates are drawn from this domain’s skill pool below.

Production and Non-Production EnvironmentsI&S-05

Crosswalk

ISO/IEC 42001EU AI ActBSI AIC4

Implementation & auditing guidance

Shared implementation — 8 steps

Cloud Service Provider — 10 steps

Application Provider — 6 steps

Model Provider — 6 steps

Orchestrated Services Provider — 6 steps

Verbatim Cloud Security Alliance (CSA) implementation & auditing steps are available to the owner.

Fitted skill — mapping in progress. Candidates are drawn from this domain’s skill pool below.

Segmentation and SegregationI&S-06

Crosswalk

ISO/IEC 42001EU AI ActBSI AIC4

Implementation & auditing guidance

Shared implementation — 6 steps

Cloud Service Provider — 11 steps

Application Provider — 7 steps

Model Provider — 7 steps

Orchestrated Services Provider — 7 steps

Verbatim Cloud Security Alliance (CSA) implementation & auditing steps are available to the owner.

Fitted skill — mapping in progress. Candidates are drawn from this domain’s skill pool below.

Migration to Hosted EnvironmentsI&S-07

Crosswalk

ISO/IEC 42001EU AI ActBSI AIC4

Implementation & auditing guidance

Shared implementation — 9 steps

Cloud Service Provider — 10 steps

Application Provider — 7 steps

Model Provider — 7 steps

Orchestrated Services Provider — 7 steps

Verbatim Cloud Security Alliance (CSA) implementation & auditing steps are available to the owner.

Fitted skill — mapping in progress. Candidates are drawn from this domain’s skill pool below.

Network Architecture DocumentationI&S-08

Crosswalk

ISO/IEC 42001EU AI ActBSI AIC4

Implementation & auditing guidance

Shared implementation — 9 steps

Cloud Service Provider — 8 steps

Application Provider — 6 steps

Model Provider — 6 steps

Orchestrated Services Provider — 6 steps

Verbatim Cloud Security Alliance (CSA) implementation & auditing steps are available to the owner.

Fitted skill — mapping in progress. Candidates are drawn from this domain’s skill pool below.

Network DefenseI&S-09

Crosswalk

ISO/IEC 42001EU AI ActBSI AIC4

Implementation & auditing guidance

Shared implementation — 9 steps

Cloud Service Provider — 12 steps

Application Provider — 7 steps

Model Provider — 7 steps

Orchestrated Services Provider — 7 steps

Verbatim Cloud Security Alliance (CSA) implementation & auditing steps are available to the owner.

Fitted skill — mapping in progress. Candidates are drawn from this domain’s skill pool below.

Standard names and gap levels shown; the specific clause references and full control text are available to the owner.

Skill pool — I&S

Analyzing Cloud Storage Access PatternsBuilding Cloud SIEM With SentinelDetecting Aws IAM Privilege EscalationDetecting Exfiltration Over DNS With ZeekDetecting Stuxnet Style AttacksImplementing Browser Isolation For Zero TrustImplementing Ics Firewall With TofinoImplementing Next Generation Firewall With Palo AltoMonitoring Scada Modbus Traffic AnomaliesPerforming DNS Enumeration And Zone TransferPerforming Ot Vulnerability Scanning SafelyScanning Container Images With Grype

Sample view. 12 of 169 skill names shown; the full list is available to the owner.

The other AICM domains

A&AAudit & Assurance AISApplication & Interface Security BCRBusiness Continuity Management and Operational Resilience CCCChange Control and Configuration Management CEKCryptography, Encryption & Key Management DCSDatacenter Security DSPData Security and Privacy Lifecycle Management GRCGovernance, Risk and Compliance HRSHuman Resources IAMIdentity & Access Management IPYInteroperability & Portability LOGLogging and Monitoring MDSModel Security SEFSecurity Incident Management, E-Discovery, & Cloud Forensics STASupply Chain Management, Transparency, and Accountability TVMThreat & Vulnerability Management UEMUniversal Endpoint Management

Assess a function on this domain →See how a fit gets deployed