Catalogue of Tools & Metrics for Trustworthy AI

These tools and metrics are designed to help AI actors develop and use trustworthy AI systems and applications that respect human rights and are fair, transparent, explainable, robust, secure and safe.

AI-related Regulations and Standards Implementation and Assurance



AI-related Regulations and Standards Implementation and Assurance is a set of process-based workbenches from the AI Assurance Institute. The workbenches help organisations implement, and assess their compliance with, AI-relevant regulations and standards. They cover the EU Cyber Resilience Act, the Digital Operational Resilience Act (DORA) and the NIS2 Directive, together with EN, ETSI, ISO and NIST standards. They also include best practice for the system development life cycle, for controlling AI agents and for multi-agent systems. The aim is to turn complex, overlapping obligations into structured, organisation-wide implementation and assessment work.

Process owners work from action lists. They identify the applicable requirements, assess the related risks and define the controls needed. From this they build an implementation roadmap, then produce the supporting artefacts and assess compliance against each framework.

Each framework has its own process flow. The Cyber Resilience Act flow moves through scope, requirements, vulnerability handling, conformity and information sharing. The DORA flow covers information and communication technology (ICT) risk, incident management, resilience testing, third-party risk and information sharing. The agent-control and multi-agent flows cover the whole agent life cycle, from directing the agent harness or agent graph through to monitoring, incident handling and retirement. Structuring the work this way assigns accountability across the organisation and tracks implementation progress.

Use Cases

There is no use cases for this tool yet.

Would you like to submit a use case for this tool?

If you have used this tool, we would love to know more about your experience.

Add use case
Partnership on AI

Disclaimer: The tools and metrics featured herein are solely those of the originating authors and are not vetted or endorsed by the OECD or its member countries. The Organisation cannot be held responsible for possible issues resulting from the posting of links to third parties' tools and metrics on this catalogue. More on the methodology can be found at https://oecd.ai/catalogue/faq.