AI Governance
Operating models, accountability, lifecycle governance, human oversight, policy and enterprise AI risk management.
RESEARCH • STANDARDS • ADVISORY • EDUCATION
Advancing trustworthy
artificial intelligence.
The Institute for AI Governance, Cybersecurity & Risk Management develops practical frameworks, research and implementation guidance for governing and securing increasingly capable AI systems.
01 / ABOUT
Where AI governance meets security engineering.
AI risk can no longer be treated as a policy problem alone. Effective governance requires standards, technical controls, threat-informed design, rigorous assurance and continuous testing.
IAIGSRM brings these disciplines together in an independent institute model focused on research, education and practical engagement with public, private and non-profit organizations.
02 / FIVE PILLARS
A unified approach to AI risk.
AI Standards & Assurance
Alignment and assessment across ISO/IEC 42001, NIST AI RMF, emerging regulation and control frameworks.
AI Cybersecurity
Security architecture and controls for models, data, RAG, agents, infrastructure, identities and AI supply chains.
AI Threat Modeling
Threat-informed analysis connecting AI attack vectors, system impacts and layered mitigating controls.
AI Red Teaming
Adversarial testing for prompt injection, data leakage, unsafe agency, model abuse and control effectiveness.
03 / SERVICES
From strategy to sustained operation.
Advise
Assess risk, define governance, interpret standards and establish priorities.
Design
Develop architectures, control frameworks, threat models, operating models and assurance programs.
Deliver
Implement controls, assessments, testing programs, governance processes and technical safeguards.
Operate
Support continuous assurance, monitoring, control validation, red teaming and governance maturation.
04 / RESEARCH & PUBLICATIONS
Research intended to become practice.
IAIGSRM develops applied research at the intersection of AI governance, cybersecurity, risk, ethics and assurance, emphasizing methods organizations can implement and evaluate.
Browse the IAIGCRM Research Library →
Explore the IAIGSRM AI Governance, Security & Risk Management Framework, integrating AI Readiness, Audit & Assurance, and Control Delivery. Its three-tier architecture connects threat scenarios, baseline controls mapped to NIST SP 800-53 Rev. 5, ISO/IEC 27002:2022 and ISO/IEC 42001:2023, and enhanced safeguards. A separate AI red teaming capability is informed by Japan AISI methodology.
05 / RESOURCES
A curated AI governance, security & risk library.
Authoritative regulatory, historical, standards and technical references for researchers, practitioners, technology leaders, risk professionals and policymakers.
01
AI Regulation & Policy
European Union Artificial Intelligence Act
Regulation (EU) 2024/1689 establishes a harmonized, risk-based framework for artificial intelligence in the European Union, including prohibited practices, high-risk systems, transparency requirements, general-purpose AI, governance and enforcement.
02
History & Evolution of AI
From formal logic, Gödel and Turing through symbolic AI, expert systems, machine learning, deep learning, foundation models and agentic AI.
03
Standards, Frameworks & Technical Resources
Curated references for governance, risk, security, threat modeling and assurance.
Governance & Risk
ISO/IEC 42001 — AI Management Systems ↗ISO/IEC 23894 — AI Risk Management ↗ISO/IEC 22989 — AI Concepts & Terminology ↗NIST AI Risk
NIST AI RMF ↗NIST AI 600-1 — GenAI Profile ↗NIST AI Resource Center ↗AI Security
OWASP GenAI Security Project ↗OWASP LLM Top 10 ↗MITRE ATLAS ↗Cybersecurity Foundations
NIST SP 800-53 Rev. 5 ↗ISO/IEC 27001 ↗ISO/IEC 27002:2022 ↗NIST Cybersecurity Framework ↗04
IAIGSRM Research & Publications
Research and developing frameworks spanning AI threat modeling, controls engineering, red teaming, governance, assurance, human oversight, machine morality and AI security architecture.
AI Threat→AI Risk→Control→Implementation→Testing→Evidence→Assurance
05
AI Organizations & International Initiatives
A geographically organized directory of AI safety, governance and research organizations, beginning with four Japanese institutions and initiatives. Includes cross-references to the Hiroshima AI Process and AI red teaming resources.
06 / PRACTICAL GUIDANCE
AI Security & Safety Guidance.
Actionable security and safety advice for people using, managing and evaluating AI. This guidance complements—but is distinct from—IAIGSRM research, assurance frameworks and consulting delivery methodologies.
01
Individuals
Practical precautions for personal privacy, safe prompting, identifying suspicious outputs and protecting sensitive information.
02
Enterprise Users
Guidance for approved workplace AI use, information classification, enterprise assistants, access permissions and reporting potential disclosures.
Additional checklists and articles are planned.
03
Security Professionals
Practical checklists and awareness guidance on prompt injection, AI-enabled social engineering, agent permissions, model-output validation and defensive testing.
Additional technical guidance is planned.
06 / FOUNDER
Stephen Buerle, PhD, CISSP
Founder, Executive Director & Head of Research
Stephen Buerle brings experience in cybersecurity, enterprise security architecture, AI governance, assurance, and applied AI research. His work spans penetration testing, security engineering, controls development, risk management, and expert systems and machine learning. He has worked with the IAEA, Unisys, JPMorgan Chase, IBM, and Kyndryl, and holds graduate degrees from Harvard, Rensselaer Polytechnic Institute, and the University at Albany.
07 / CONTACT
Build AI systems worthy of trust.
IAIGSRM is being established as an independent institute for research, education, advisory and technical engagement in AI governance, security and risk management.
Start a conversation