Cloud Security Alliance Expands Agentic AI Governance Work<\/p>\n
The Cloud Security Alliance (CSA) has announced a series of CSAI Foundation milestones aimed at securing what it calls the agentic control plane, including a new catastrophic risk initiative, CVE Numbering Authority authorization, and the acquisition of two agentic AI specifications.<\/p>\n
The April 29 announcement<\/a>, made at the CSA Agentic AI Security Summit, centers on governance and assurance for agentic AI systems. CSA said the milestones expand the CSAI Foundation’s 2026 mission of “Securing the Agentic Control Plane.”<\/p>\n According to CSA, the announcements include the launch of the STAR for AI Catastrophic Risk Annex, authorization as a CVE Numbering Authority through MITRE and the acquisition of the Autonomous Action Runtime Management specification and Agentic Trust Framework.<\/p>\n “The global economy is contending with two exponentials at once: frontier models leapfrogging each other month over month, and viral, bottom-up adoption of agents inside the business,” said Jim Reavis, CEO and co-founder of CSA. “Today’s announcements give enterprises, auditors, and regulators the technical specifications and assurance scaffolding to say yes to agentic AI without losing control of it.”<\/p>\n Catastrophic Risk Annex Planned<\/p>\n