Cloud Security Alliance releases second paper on ethical implementation of AI
Driven by the need to address the evolving landscape of artificial intelligence (AI) and its associated risks and ethical considerations, the Cloud Security Alliance (CSA) has released a new report, AI Organizational Responsibilities - Governance, Risk Management, Compliance, and Cultural Aspects. The second in a series focused on delineating organizational responsibilities for AI, the report offers a detailed approach to managing AI-related risks, adhering to regulatory requirements, and maintaining ethical standards all while leveraging AI technologies.
Drafted by CSA’s AI Organizational Responsibilities Working Group, the paper builds on the foundational document AI Organizational Responsibilities - Core Security Responsibilities—which focuses on data security, model security, and vulnerability management—and provides a comprehensive framework for integrating AI within organizational structures with an emphasis on governance, risk management, and cultural aspects.
“The true potential of AI can only be realized when governance, risk management, and culture are integrated into its deployment. These elements ensure responsible innovation, mitigate unintended consequences, and promote an AI ecosystem that is not only efficient but also ethical and inclusive. It's our hope that the framework provided in this paper will guide enterprises toward responsible and secure AI development and deployment,” said Ken Huang, co-chair of the AI Organizational Responsibilities Working Group and a lead author of the paper.
Structured into four main areas of responsibility—risk management, governance and compliance, safety culture and training, and shadow AI prevention—each section is further analyzed across six cross-cutting areas of concern to ensure that organizations can comprehensively assess, implement, and manage their AI initiatives while addressing key aspects such as accountability, implementation strategies, monitoring, access control, and regulatory compliance.
Future papers in the series will tackle additional AI challenges as organizations adopt and implement AI applications, supply chain integrity, and mitigation of misuses.
