IACAIP Shielded Framework®
Global Mapping Framework for Cybersecurity and Artificial Intelligence Governance
The IACAIP Shielded Framework® is the flagship cybersecurity, AI governance, and risk management frameworkdeveloped by IACAIP®. It provides organisations with a comprehensive methodology for cybersecurity governance, AI governance, risk management, secure AI implementation, compliance, assurance, and certification.
Designed to support organisations of all sizes, the IACAIP Shielded Framework® enables the implementation, assessment, continual improvement, and certification of cybersecurity and AI governance programmes. The framework helps organisations strengthen cyber resilience, manage AI risks, demonstrate regulatory compliance, and establish trusted governance practices.
Unlike frameworks that rely on a single standard, the IACAIP Shielded Framework® is framework-aligned rather than framework-dependent. Organisations can demonstrate conformity with the IACAIP® methodology while mapping controls and governance requirements to internationally recognised cybersecurity standards, AI governance frameworks, and regulatory guidance. This flexible approach simplifies compliance, reduces duplication of effort, and supports evolving global cybersecurity and AI regulations.
Primary Global Alignment
The IACAIP Shielded Framework® is designed to align with internationally recognised cybersecurity, AI governance, information security, and regulatory frameworks. Rather than replacing existing standards, it provides a unified governance methodology that enables organisations to implement a single, integrated framework while demonstrating alignment with globally accepted best practices.
The framework incorporates Cybersecurity Governance aligned with the NIST Cybersecurity Framework (NIST CSF 2.0), helping organisations establish effective governance, risk management, and cyber resilience. For AI Governance, it aligns with the NIST AI Risk Management Framework (NIST AI RMF), supporting trustworthy, secure, and responsible AI systems throughout their lifecycle.
For Information Security Management, the framework aligns with ISO/IEC 27001, while AI Management Systemsare aligned with ISO/IEC 42001, enabling organisations to implement structured governance for both information security and artificial intelligence. The framework also supports Secure AI Development through alignment with the UK AI Cyber Security Code of Practice, promoting secure-by-design AI development and deployment.
Standards and Regulatory Alignment
To strengthen organisational resilience, the IACAIP Shielded Framework® incorporates guidance from the UK National Cyber Security Centre (NCSC) for Cyber Resilience and aligns AI Regulatory Governance with relevant provisions of the EU AI Act, helping organisations prepare for evolving AI regulatory requirements.
By aligning with these internationally recognised standards, frameworks, and regulatory guidance, the IACAIP Shielded Framework® enables organisations to strengthen cybersecurity governance, implement responsible AI governance, improve risk management, enhance cyber resilience, support regulatory compliance, and demonstrate a structured approach to cybersecurity and AI assurance. Its framework-aligned, rather than framework-dependent, methodology reduces compliance complexity, eliminates duplication of effort, and provides the flexibility to map controls across multiple standards as regulatory and business requirements evolve.
Framework Domain Mapping
The IACAIP Shielded Framework® integrates the core domains of cybersecurity, AI governance, information security, privacy, and regulatory compliance into a single, cohesive governance methodology. Each domain is aligned with internationally recognised standards and regulatory frameworks, enabling organisations to implement best practices while maintaining flexibility across multiple compliance requirements.
Governance focuses on leadership, accountability, policy development, strategic oversight, and organisational governance. This domain aligns with ISO/IEC 42001 and the NIST AI Risk Management Framework (NIST AI RMF) to support effective governance of both cybersecurity and artificial intelligence.
Cybersecurity addresses security controls, identity and access management, continuous monitoring, cyber resilience, and organisational security practices. It is aligned with the NIST Cybersecurity Framework (NIST CSF 2.0) and ISO/IEC 27001, providing a comprehensive foundation for cybersecurity governance and information security management.
Framework Domain Mapping
Secure AI covers the secure design, development, deployment, operation, and protection of AI systems and models. This domain aligns with the UK AI Cyber Security Code of Practice and guidance from the UK National Cyber Security Centre (NCSC) to promote secure-by-design AI throughout the AI lifecycle.
Risk Management provides an integrated approach to enterprise risk management and AI risk management, enabling organisations to identify, assess, treat, monitor, and continually improve cybersecurity and AI risks. This domain aligns with ISO/IEC 27001 and the NIST AI Risk Management Framework (NIST AI RMF).
Regulatory Governance supports organisations in establishing governance structures that help meet AI-related legal and regulatory obligations. This domain aligns with the relevant provisions of the EU AI Act, enabling organisations to prepare for evolving AI governance and compliance requirements.
Privacy establishes governance for personal data protection, privacy management, and responsible data handling. It aligns with the General Data Protection Regulation (GDPR), the UK GDPR, and other applicable privacy laws, helping organisations integrate privacy into their cybersecurity and AI governance programmes.
Together, these domains provide a comprehensive governance framework that enables organisations to strengthen cybersecurity, manage AI risks, improve regulatory compliance, and build resilient, trustworthy, and secure digital and AI environments.
IACAIP Shielded Baseline®
Purpose
The IACAIP Shielded Baseline® establishes the minimum cybersecurity and AI governance capability expected of organizations beginning implementation of the IACAIP Shielded Framework®. It provides a foundation for governance, risk management, cybersecurity, secure AI, and privacy through a set of essential baseline controls.
Primary Global Alignment
The IACAIP Shielded Baseline® aligns with internationally recognized cybersecurity and governance frameworks, including:
-
NIST Cybersecurity Framework (CSF) 2.0 Core Functions for essential cybersecurity controls.
-
ISO/IEC 27001 for foundational information security management controls.
-
UK AI Cyber Security Code of Practice for basic secure AI governance and security practices.
-
UK National Cyber Security Centre (NCSC) Guidance for fundamental cyber hygiene measures.
Baseline Domain Mapping
The IACAIP Shielded Baseline® is organised into core domains that correspond to established international frameworks:
-
Governance establishes basic governance responsibilities and aligns with the NIST CSF Govern function.
-
Asset Management focuses on maintaining inventories of assets and defining ownership responsibilities, aligning with both NIST CSF and ISO/IEC 27001.
-
Identity and Access Management provides foundational authentication and authorization controls aligned with ISO/IEC 27001.
-
Risk Management introduces initial risk assessment and treatment activities consistent with ISO/IEC 27001.
-
Secure AI establishes basic AI governance and security controls aligned with the UK AI Cyber Security Code of Practice.
-
Incident Response defines response planning capabilities aligned with the NIST CSF Respond function.
-
Recovery establishes recovery planning and restoration activities aligned with the NIST CSF Recover function.
Together, these domains provide organisations with a practical starting point for implementing cybersecurity and secure AI governance while maintaining alignment with internationally recognized standards and best practices.
IACAIP Shielded Assurance®
Purpose
The IACAIP Shielded Assurance® programme provides an independently assessed level of cybersecurity and AI governance maturity. It validates that organisations have implemented robust governance, cybersecurity, and AI management practices, demonstrating that these capabilities are operating effectively and in line with recognised international standards.
Primary Global Alignment
The IACAIP Shielded Assurance® programme aligns with leading international standards and regulatory frameworks, including:
-
ISO/IEC 42001 for AI governance assurance.
-
ISO/IEC 27001 for information security assurance.
-
NIST AI Risk Management Framework (AI RMF) for AI risk management.
-
NIST Cybersecurity Framework (CSF) 2.0 for cybersecurity assurance.
-
Relevant provisions of the European Union AI Act for AI regulatory governance and compliance.
Assurance Domain Mapping
The IACAIP Shielded Assurance® programme is structured around key assurance domains that reflect internationally recognised best practice:
-
Governance focuses on mature governance oversight and accountability, aligned with ISO/IEC 42001.
-
Security assesses the effectiveness of operational cybersecurity controls and information security management, aligned with ISO/IEC 27001.
-
AI Lifecycle evaluates governance across the design, development, deployment, operation and retirement of AI systems, aligned with the NIST AI Risk Management Framework (AI RMF).
-
Risk Management examines the continual identification, assessment and treatment of both AI-specific and enterprise-wide risks, aligned with ISO/IEC 27001.
-
Monitoring assesses continuous monitoring, assurance and detection capabilities, aligned with the NIST Cybersecurity Framework (CSF) 2.0 Detect function.
-
Compliance evaluates governance arrangements for regulatory compliance, including alignment with relevant provisions of the European Union AI Act.
Collectively, these assurance domains provide organisations with independent validation that their cybersecurity, AI governance and risk management practices are mature, effective and aligned with internationally recognised standards, supporting regulatory readiness and stakeholder confidence.
IACAIP Shielded Certification®
Purpose
The IACAIP® Shielded Certification programme is the formal assessment process used to determine conformity with the IACAIP® Shielded Framework. Certification evaluates the implementation of the framework against proprietary IACAIP® requirements while documenting alignment with internationally recognised standards, frameworks and regulatory guidance. This provides organisations with independent validation of their cybersecurity and AI governance capabilities and demonstrates that their practices meet the requirements of the IACAIP® methodology.
Primary Global Alignment
The IACAIP® Shielded Certification programme aligns with leading international standards and frameworks, including:
-
IACAIP® Shielded Framework as the primary certification methodology and assessment standard.
-
NIST Cybersecurity Framework (CSF) 2.0 for mapping cybersecurity controls and governance practices.
-
ISO/IEC 27001 for information security management and security control mapping.
-
ISO/IEC 42001 for AI management systems and AI governance mapping.
-
NIST AI Risk Management Framework (AI RMF) for AI risk management and trustworthy AI practices.
Certification Domain Mapping
The IACAIP® Shielded Certification programme assesses organisations across key domains that reflect internationally recognised best practice:
-
Governance evaluates organisational governance structures, leadership responsibilities and oversight arrangements, aligned with ISO/IEC 42001.
-
Security assesses the implementation and effectiveness of cybersecurity and information security controls, aligned with ISO/IEC 27001.
-
AI Governance evaluates the governance, management and oversight of AI systems throughout their lifecycle, aligned with the NIST AI Risk Management Framework (AI RMF).
-
Risk Management examines the identification, assessment, treatment and ongoing management of enterprise and AI-related risks, aligned with ISO/IEC 27001.
-
Compliance evaluates governance arrangements supporting regulatory compliance, including alignment with relevant provisions of the European Union AI Act.
-
Assurance provides an independent assessment against the IACAIP® Certification Requirements, confirming conformity with the IACAIP® Shielded Framework and supporting confidence among customers, regulators and stakeholders.
Together, these certification domains provide organisations with an independently verified demonstration that their cybersecurity, AI governance and risk management practices conform to the IACAIP® Shielded Framework while maintaining alignment with internationally recognised standards and regulatory expectations.
IACAIP Shielded Certified®
Purpose
IACAIP® Shielded Certified® is the designation awarded to organisations that have successfully completed certification against the IACAIP® Shielded Framework. The designation demonstrates that an organisation has undergone an independent assessment and has been verified as conforming to the requirements of the IACAIP® methodology. It also evidences alignment with internationally recognised cybersecurity, information security and AI governance standards and regulatory guidance.
Primary Global Alignment
The IACAIP® Shielded Certified® designation is supported by alignment with leading international standards and frameworks, including:
-
IACAIP® Shielded Framework as the certification methodology against which organisations are independently assessed.
-
NIST Cybersecurity Framework (CSF) 2.0 for cybersecurity governance and control alignment.
-
ISO/IEC 27001 for information security management and security control alignment.
-
ISO/IEC 42001 for AI management systems and AI governance alignment.
-
NIST AI Risk Management Framework (AI RMF) for AI risk management and trustworthy AI governance.
Recognition Domain Mapping
The IACAIP® Shielded Certified® designation recognises organisational achievement across several key areas that reflect internationally recognised best practice:
-
Certified Status confirms that the organisation has successfully completed an independent assessment and demonstrated verified implementation of the requirements of the IACAIP® Shielded Framework.
-
Governance recognises the maturity of organisational governance and oversight arrangements, aligned with ISO/IEC 42001.
-
Security recognises the maturity and effectiveness of cybersecurity and information security practices, aligned with ISO/IEC 27001.
-
AI Governance recognises the maturity of AI governance, risk management and lifecycle oversight, aligned with the NIST AI Risk Management Framework (AI RMF).
-
Regulatory Readiness demonstrates that the organisation has established governance processes and evidence that support alignment with relevant provisions of the European Union AI Act and other applicable regulatory requirements.
Collectively, the IACAIP® Shielded Certified® designation provides independent recognition that an organisation has achieved a verified level of cybersecurity and AI governance maturity through certification against the IACAIP® Shielded Framework, while demonstrating alignment with internationally recognised standards, best practice and regulatory expectations.
IACAIP Shielded Auditor®
Purpose
The IACAIP® Shielded Auditor® credential recognises professionals who are qualified to conduct independent assessments against the IACAIP® Shielded Framework. Credential holders have demonstrated the knowledge, competence and professional capability required to evaluate organisational conformity with the IACAIP® methodology while assessing alignment with internationally recognised cybersecurity, information security and AI governance standards.
Primary Global Alignment
The IACAIP® Shielded Auditor® credential aligns with leading international standards and frameworks, including:
-
IACAIP® Shielded Framework as the primary assessment methodology for conducting independent audits and certification assessments.
-
NIST Cybersecurity Framework (CSF) 2.0 for cybersecurity assessment and governance evaluation.
-
ISO/IEC 27001 for information security management system assessment and security control evaluation.
-
ISO/IEC 42001 for AI management systems and AI governance assessment.
-
NIST AI Risk Management Framework (AI RMF) for AI risk assessment and trustworthy AI governance.
Auditor Competency Mapping
The IACAIP® Shielded Auditor® credential is based on a comprehensive set of competencies that reflect internationally recognised best practice:
-
Governance Assessment evaluates organisational governance structures, leadership responsibilities and oversight arrangements, aligned with ISO/IEC 42001.
-
Security Assessment assesses the implementation and effectiveness of cybersecurity and information security controls, aligned with ISO/IEC 27001.
-
AI Governance evaluates AI governance frameworks, management systems and lifecycle oversight, aligned with the NIST AI Risk Management Framework (AI RMF).
-
Risk Assessment examines the identification, analysis and evaluation of enterprise and AI-related risks, aligned with ISO/IEC 27001.
-
Reporting focuses on the preparation of independent assurance reports in accordance with the IACAIP® assessment methodology, providing objective evidence of organisational conformity and recommendations for continual improvement.
Collectively, these competencies ensure that IACAIP® Shielded Auditor® credential holders are equipped to perform consistent, independent and impartial assessments against the IACAIP® Shielded Framework, while demonstrating alignment with internationally recognised standards, best practice and regulatory expectations.
IACAIP Shielded Professional®
Purpose
The IACAIP® Shielded Professional® credential recognises practitioners who possess the knowledge, skills and practical competence required to implement cybersecurity and AI governance using the IACAIP® Shielded Framework. Credential holders are equipped to support organisations in establishing governance, managing risk, implementing cybersecurity controls and embedding secure AI practices in accordance with the IACAIP® methodology.
Primary Global Alignment
The IACAIP® Shielded Professional® credential aligns with leading international standards and frameworks, including:
-
IACAIP® Shielded Framework as the primary methodology for implementing cybersecurity and AI governance.
-
NIST Cybersecurity Framework (CSF) 2.0 for cybersecurity practice and operational implementation.
-
ISO/IEC 27001 for information security management and the implementation of security controls.
-
ISO/IEC 42001 for AI management systems and AI governance implementation.
-
NIST AI Risk Management Framework (AI RMF) for AI risk management and trustworthy AI practices.
Professional Competency Mapping
The IACAIP® Shielded Professional® credential is founded on a comprehensive set of competencies that reflect internationally recognised best practice:
-
Governance focuses on implementing governance structures, policies and processes in accordance with the IACAIP® Shielded Framework, aligned with ISO/IEC 42001.
-
Cybersecurity covers the implementation of cybersecurity controls and operational security practices, aligned with the NIST Cybersecurity Framework (CSF) 2.0.
-
AI Governance focuses on implementing governance, oversight and lifecycle management for AI systems, aligned with the NIST AI Risk Management Framework (AI RMF).
-
Risk Management develops the capability to identify, assess, treat and monitor organisational and AI-related risks, aligned with ISO/IEC 27001.
-
Compliance supports the implementation of governance processes that facilitate compliance with applicable legal, regulatory and ethical requirements, including alignment with relevant provisions of the European Union AI Act.
Together, these competencies enable IACAIP® Shielded Professional® credential holders to implement the IACAIP® Shielded Framework effectively, helping organisations strengthen cybersecurity, establish robust AI governance and maintain alignment with internationally recognised standards, best practice and evolving regulatory expectations.
IACAIP Shielded Registry®
Purpose
The IACAIP® Shielded Registry® is the official public register of organisations certified under the IACAIP® Shielded Framework and individuals who hold recognised IACAIP® professional credentials. The Registry provides independent verification of certification status, credential validity, certification level and assessment history, promoting transparency, trust and confidence for customers, regulators, business partners and other stakeholders.
By providing a trusted source of certification and credential information, the Registry supports procurement decisions, regulatory due diligence and stakeholder assurance while demonstrating an organisation's or individual's commitment to recognised standards of cybersecurity and AI governance.
Primary Global Alignment
The IACAIP® Shielded Registry® aligns with internationally recognised principles and best practice for certification transparency and credential verification, including:
-
IACAIP® Shielded Framework as the authoritative source for certification and credential recognition.
-
International conformity assessment best practice for maintaining transparent and verifiable certification records.
-
ISO/IEC 17021 principles, where applicable, to support governance transparency and confidence in certification activities.
-
Professional certification good practice for the verification and recognition of individual credentials.
-
Regulatory and customer due diligence requirements, providing evidence that supports governance, certification and supplier assurance activities.
Registry Function Mapping
The IACAIP® Shielded Registry® performs a range of functions that support independent verification and public confidence:
-
Organisation Verification confirms the certification status and certification level of organisations that have successfully completed assessment against the IACAIP® Shielded Certification programme.
-
Professional Verification confirms the validity of IACAIP® Shielded Auditor® and IACAIP® Shielded Professional® credentials awarded through the IACAIP® Credentialing Programme.
-
Certification Status provides current certification information, including whether a certification is active, suspended, expired or withdrawn, in accordance with recognised conformity assessment practices.
-
Public Trust enables customers, procurement teams, regulators and other stakeholders to independently verify certification and professional credentials, supporting supplier assurance and informed decision-making.
-
Regulatory Support provides evidence of governance, certification and professional competence that may be used to support customer assurance, procurement processes and regulatory due diligence.
-
Transparency delivers publicly accessible certification and credential information in accordance with internationally recognised principles of openness, accountability and certification transparency.
Collectively, these functions ensure that the IACAIP® Shielded Registry® serves as a trusted and authoritative source for verifying organisational certification and professional credentials. The Registry strengthens confidence in the IACAIP® Shielded Framework by supporting transparency, regulatory readiness, supplier assurance and stakeholder trust through independent verification of recognised cybersecurity and AI governance achievements.
Unified Global Alignment Matrix
The IACAIP® Shielded Framework provides a unified methodology for cybersecurity, artificial intelligence governance, risk management, secure AI and privacy. It has been developed as a standalone framework that aligns with internationally recognised standards, regulatory guidance and industry best practice, enabling organisations to implement a single, integrated governance approach while demonstrating alignment with multiple external frameworks.
Framework Position
The IACAIP® Shielded Framework is a standalone framework built upon internationally recognised principles for cybersecurity, AI governance and organisational resilience. Rather than depending on any single external standard, it provides organisations with an integrated methodology that enables implementation, assessment, continual improvement and certification while demonstrating alignment with leading international standards, regulatory frameworks and recognised best practice.
Global Domain Alignment
The IACAIP® Shielded Framework aligns its core domains with internationally recognised standards and guidance as follows:
-
AI Governance establishes governance structures, accountability, oversight and AI lifecycle management, aligned with the NIST AI Risk Management Framework (AI RMF) and ISO/IEC 42001.
-
Cybersecurity provides comprehensive security controls, cyber resilience, monitoring and recovery capabilities, aligned with the NIST Cybersecurity Framework (CSF) 2.0 and ISO/IEC 27001.
-
Secure AI supports the secure design, development, deployment and operation of AI systems, including model protection and supply chain security, aligned with the UK AI Cyber Security Code of Practice and guidance published by the UK National Cyber Security Centre (NCSC).
-
Risk Management integrates enterprise and AI-specific risk identification, assessment, treatment and continual monitoring, aligned with ISO/IEC 27001 and the NIST AI Risk Management Framework (AI RMF).
-
AI Regulation establishes governance practices that support compliance with applicable AI legislation and regulatory obligations, including relevant provisions of the European Union AI Act and applicable national laws.
-
Privacy incorporates privacy governance, data protection and accountability principles that support compliance with the UK General Data Protection Regulation (UK GDPR), the EU General Data Protection Regulation (GDPR) and other applicable national and state privacy legislation.
Why Choose the IACAIP® Shielded Framework?
The IACAIP® Shielded Framework provides organisations, businesses, government agencies, educational institutions and cybersecurity professionals with a comprehensive framework for cybersecurity and artificial intelligence (AI) safety. By integrating governance, risk management, cybersecurity, secure AI, privacy and regulatory readiness into a single methodology, the framework helps organisations strengthen resilience, build stakeholder trust and demonstrate alignment with internationally recognised standards and best practice.
Whether implementing secure AI, improving cyber resilience, preparing for certification or developing professional capability, the IACAIP® Shielded Framework offers a practical, scalable and globally aligned approach that supports compliance, reduces risk and enables responsible innovation across both the public and private sectors.