These tools and metrics are designed to help AI actors develop and use trustworthy AI systems and applications that respect human rights and are fair, transparent, explainable, robust, secure and safe.
CREST AI Principles
AI is changing how cybersecurity services are delivered, creating opportunities to improve service delivery while introducing new risks and responsibilities. As AI adoption accelerates, organisations need to consider how AI-enabled activities affect service delivery, client outcomes, data handling, decision-making and operational risk.
CREST's nine Principles for AI-enabled Activities provide a practical foundation for responsible AI use in cybersecurity. They establish shared expectations for the governance, oversight and control of AI-enabled activities and support trust, transparency, accountability and assurance in AI-enabled cybersecurity services.
The Principles cover nine areas:
- Accountability and governance
- Transparency of use
- Documentation and auditability
- Boundaries and control
- Data handling, sovereignty and client control
- Security and confidentiality
- Secure development of AI tooling
- Supply chain assurance
- Resilience and business continuity
The Principles address the governance and operational responsibilities associated with the use of AI in cybersecurity services. They cover organisational controls, client communication, protection of information, professional oversight, management of third-party dependencies and continuity of service.
The Principles also underpin the CREST AI Charter. Organisations becoming Charter Signatories publicly support the Principles as a practical foundation for responsible AI use in cybersecurity and contribute to the development of trusted AI-enabled cybersecurity services.
The Principles form part of CREST's wider programme of AI standards, research and industry collaboration, which supports cybersecurity providers, buyers and policymakers in navigating the opportunities, risks and responsibilities associated with AI.
About the tool
You can click on the links to see the associated tools
Tool type(s):
Objective(s):
Impacted stakeholders:
Purpose(s):
Target sector(s):
Country/Territory of origin:
Lifecycle stage(s):
Type of approach:
Maturity:
Usage rights:
Target groups:
Target users:
Stakeholder group:
Validity:
Enforcement:
Geographical scope:
People involved:
Required skills:
Technology platforms:
Tags:
- ai governance
- transparency
- ai risk management
- responsible ai
- ai assurance
- data sovereignty
- human oversight
- ai accountability
- ai auditability
- ai-enabled cybersecurity
- ai principles
- business continuity
- client control
- confidentiality
- cybersecurity services
- professional standards
- supply chain assurance
- ai-enabled cyber security
- secure ai
- secure ai deployment
- cyber resilience
Use Cases
Would you like to submit a use case for this tool?
If you have used this tool, we would love to know more about your experience.
Add use case
Partnership on AI
