Assessed Intelligence launches ARISE Framework v2.1 for unified AI governance

Assessed Intelligence has released ARISE Framework v2.1, a governance system designed to help organizations manage AI, cybersecurity, privacy, and ethics under one operating model. The update adds 128 controls, 953 requirements and expanded crosswalks, with publication available now on ARISEFramework.com and GitHub.

Why it matters: - Organizations are dealing with overlapping AI, cybersecurity, privacy and ethics obligations, often through separate programs and evidence sets. - ARISE Framework v2.1 is designed to unify those obligations into one governance structure so teams can reuse controls, evidence and reporting. - The release is free for internal governance, compliance readiness, education, research and nonprofit use.

What happened: - Assessed Intelligence released version 2.1 of the ARISE Framework®, a governance operating system for AI, cybersecurity, privacy and ethics. - The framework is published at ARISEFramework.com and on GitHub under the ARISE Framework® Public Use License. - ARISE Framework v2.1.0 is available now in the public repository.

The details: - ARISE Framework® now includes 128 controls and 953 requirements across seven domains: GOVERN, MANAGE, IDENTIFY, PROTECT, DETECT, RESPOND and VALIDATE. - The framework also includes more than 44 published crosswalks, with rationale on mapped rows. - Control and requirement IDs are permanent, which lets organizations carry evidence forward from the initial 2025 release without fully remapping. - The framework includes a 38-node taxonomy, and all controls, requirements and crosswalks are published as CSV for use in GRC tooling. - The six prEN crosswalks cover all 128 controls and are intended to support EU AI Act conformity as harmonized standards are finalized. - The published crosswalks cover the EU AI Act and six CEN/CENELEC standards: prEN 18228, 18229-1, 18229-2, 18282, 18284 and 18286. - Additional mappings include ISO/IEC 42001 and 27001, NIST SP 800-53, the NIST AI RMF, GDPR, the HIPAA Security Rule, PCI DSS v4.0, BSI C5, the Colorado AI Act, Texas TRAIGA, California SB 53, NYC Local Law 144, OMB M-25-21 and the AIUC-1 Certificate. - The framework is free under the ARISE Framework® Public Use License for non-commercial internal governance, compliance readiness, education, research and nonprofit use. - Commercial use, including consulting, paid audits or products built on ARISE, requires a commercial license. - Assessed Intelligence supports adoption through IMPLEMENT, OPERATE, VALIDATE and INNOVATE services, including vCISO and vCRAIO engagements.

Between the lines: - The release reflects a strategy of mapping existing standards into one common structure rather than asking organizations to replace current frameworks. - That approach can reduce duplicate work for teams that need to satisfy multiple regulators, auditors and internal committees with the same underlying evidence. - The permanent IDs and published crosswalks also suggest a focus on continuity, so adopters of the 2025 release can preserve prior work as the framework evolves.

What's next: - Assessed Intelligence will continue maintaining the framework and its published crosswalks as regulatory and standards work advances. - Organizations using ARISE can load the CSV files into their own governance, risk and compliance systems to support implementation. - Commercial users will need to secure the appropriate license before using ARISE in paid services or products.

The bottom line: - ARISE Framework v2.1 aims to make AI governance, cyber, privacy and ethics easier to run as one program instead of four separate ones.