Index references recognized standards where they help explain automation, AI, and cybersecurity risk. Every reference is transparent, scoped, and linked to its official source.
Explore the registryStandards registry
These sources inform the language and risk themes used in an Index assessment. They are references, not certifications, endorsements, or substitutes for a formal compliance review.
U.S. National Institute of Standards and Technology
01What it is
Voluntary guidance for identifying and managing risks introduced by AI systems.
02How Index uses it
Index uses its trustworthiness and risk-management themes when AI performs or influences workflow steps.
03What Index does not claim
NIST did not evaluate, rate, certify, or approve this workflow.
U.S. National Institute of Standards and Technology
01What it is
A companion profile to the AI RMF focused on risks specific to generative AI.
02How Index uses it
Index references it when generative AI interprets, summarizes, or produces unstructured content.
03What Index does not claim
NIST did not evaluate, rate, certify, or approve this workflow.
U.S. National Institute of Standards and Technology
01What it is
A widely used framework of high-level outcomes for understanding and managing cybersecurity risk.
02How Index uses it
Index uses it to organize concerns involving identity, access, data protection, monitoring, and incident response.
03What Index does not claim
A reference to NIST CSF does not mean the workflow is compliant, certified, or secure.
International Organization for Standardization / IEC
01What it is
An international management-system standard for governing AI responsibly across its lifecycle.
02How Index uses it
Index references it when accountability, oversight, monitoring, or organizational AI governance is material.
03What Index does not claim
Index does not reproduce ISO requirements or claim certification or conformity.
Open Worldwide Application Security Project
01What it is
Security guidance for AI agents that use tools, access APIs, plan multiple steps, or take external actions.
02How Index uses it
Index references it when AI can invoke tools or act in connected systems.
03What Index does not claim
OWASP did not evaluate or certify this workflow.
A clear boundary
Index supports structured decision-making. It does not certify compliance, replace legal or security review, or make a deployment decision for your organization.
