Beyond NIST: Every AI Governance Framework Your Organization Needs Right Now

Jason Lee, Managing Director at Z Cyber, breaks down the full global AI governance landscape beyond NIST — HITRUST, OWASP, CSA, the AIUC, and the EU AI Act — with a deep dive on why agentic AI is a fundamentally different governance problem.

What you'll learn:
- Why HITRUST gives you something other frameworks don't — certification (0:30)
- AIUC: AI agent certification paired with insurance coverage (1:30)
- OWASP Top 10 for LLMs and the separate Top 10 for Agentic AI (3:15)
- CSA AI Controls Matrix: 243 controls for cloud-based AI (4:00)
- The agentic AI governance gap — why every framework was written pre-agent (4:30)
- NIST AI Agent Standards Initiative and what's coming (5:45)
- EU AI Act: why it applies to US organizations (6:30)
- Three actions to take this week (7:30)

Key insight: Every major AI governance framework was written before agentic AI became a mainstream enterprise reality. The standards are forming. The organizations deploying agents today are operating ahead of the governance coverage that currently exists.

Z Cyber helps organizations operationalize AI governance across every framework that matters.

Next in the series: The finale — where to focus first and what Z Cyber has been building to make all of this manageable.

Resources:
- NIST IR 8596 (Cyber AI Profile): https://nvlpubs.nist.gov/nistpubs/ir/2025/NIST.IR.8596.iprd.pdf
- AIUC — AI Agent Certification: https://aiuc.com
- Z Cyber Blog — Full Framework Breakdown: https://www.ztekcyber.com/resources/ai-governance-frameworks-hitrust-owasp-eu-ai-act
- Part 1 — AI Governance Framework Overview: https://www.ztekcyber.com/resources/ai-governance-framework-nist-hitrust-certification
- Part 2 — Secure, Defend, Thwart: https://www.ztekcyber.com/resources/ai-governance-secure-defend-thwart-operational-guide
- Part 3 — CSF 2.0 and the Govern Function: https://www.ztekcyber.com/resources/nist-csf-govern-function-ai-risk-management

Take action this week:
1. Add OWASP LLM Top 10 + Agentic AI Top 10 to AppSec requirements
2. Answer the agentic AI question — what agents, what permissions, who owns them
3. Check out AIUC.com for agent certification + insurance

Subscribe for the series finale. Questions? Drop them in the comments.

Schedule a consultation: https://www.ztekcyber.com/get-started

Видео Beyond NIST: Every AI Governance Framework Your Organization Needs Right Now канала Z Cyber