These tools and metrics are designed to help AI actors develop and use trustworthy AI systems and applications that respect human rights and are fair, transparent, explainable, robust, secure and safe.
CREST AI Charter
AI is changing how cybersecurity services are delivered. As adoption accelerates, the cybersecurity profession faces increasing opportunities, risks and responsibilities associated with the use of AI. The CREST AI Charter brings together organisations that support the responsible use of AI in cybersecurity and recognise the importance of shared principles, professional standards and industry collaboration. The Charter is a voluntary commitment to support responsible AI use across the cybersecurity profession. It provides an opportunity for organisations to publicly demonstrate their commitment to the responsible, transparent and accountable use of AI in cybersecurity.
The Charter is underpinned by CREST's nine Principles for AI-enabled Activities. These address accountability and governance, transparency of use, documentation and auditability, boundaries and control, data handling, sovereignty and client control, security and confidentiality, secure development of AI tooling, supply chain assurance, and resilience and business continuity.
By becoming a CREST AI Charter Signatory, organisations agree to publicly support CREST's AI Principles by recognising the Principles as a practical foundation for responsible AI use in cybersecurity, and helping shape trusted AI-enabled cybersecurity services.
International participation
The Charter has attracted founding signatories from CREST's global cybersecurity community, representing over 10% of CREST's membership.
The signatories span Europe, North America, the Middle East and Asia-Pacific and represent a broad cross-section of the cybersecurity industry, including providers of: Penetration testing; vulnerability assessment; incident response; security operations; threat intelligence; and threat-led penetration testing services. The Charter reflects a shared commitment to responsible AI use in cybersecurity and brings together organisations from across the profession.
Industry collaboration
The CREST AI Charter forms part of CREST's wider programme of AI standards, research and industry collaboration. Alongside the Charter, CREST provides opportunities for organisations and individuals to participate in its AI Working Group, contribute to AI in cybersecurity research and engage in community events exploring AI, cybersecurity and trusted innovation. These activities bring together cybersecurity service providers, industry leaders, policymakers, researchers and practitioners to contribute expertise, share experiences and help shape future standards, guidance and good practice for AI-enabled cybersecurity. The Charter provides a voluntary mechanism for organisations to publicly support CREST's AI Principles and participate in the wider industry conversation about responsible AI use in cybersecurity.
About the tool
You can click on the links to see the associated tools
Tool type(s):
Objective(s):
Impacted stakeholders:
Purpose(s):
Target sector(s):
Country/Territory of origin:
Lifecycle stage(s):
Type of approach:
Maturity:
Usage rights:
Target groups:
Target users:
Stakeholder group:
Validity:
Enforcement:
Geographical scope:
People involved:
Required skills:
Technology platforms:
Tags:
- trustworthy ai
- ai governance
- transparency
- accountability
- responsible ai
- human oversight
- ai charter
- ai-enabled cybersecurity
- ai principles
- community of practice
- cyber assurance
- cybersecurity ecosystem
- cybersecurity services
- professional standards
- crest ai charter
- voluntary commitment
- industry collaboration
- responsible ai deployment
- industry self-governance
- international collaboration
Use Cases
Would you like to submit a use case for this tool?
If you have used this tool, we would love to know more about your experience.
Add use case
Partnership on AI
