Reference lines for AI security. One catalog, crosswalked to SAIF, ATLAS, NIST AI RMF, OWASP LLM, OWASP Agentic, CSA AICM, SANS AISMM, ISO/IEC 42001, NIST 800-53, the EU AI Act, and GDPR.
Build = you train or host models · Acquire = you buy products with AI inside · Use = your people use AI services. Most organizations are Acquire + Use.