CIS Controls v8.1.2 AI Security Guidance Workbook
Published on July 27, 2026
Artificial intelligence (AI) is no longer limited to standalone models. Today's enterprise AI ecosystems combine large language models (LLMs), autonomous agents, and Model Context Protocol (MCP) architectures to power dynamic, multi-step workflows across data, tools, and services that expand the operational footprint organizations must secure.
Securing the Modern AI Stack
The CIS Critical Security Controls® (CIS Controls®) provide a proven foundation for managing that complexity. The CIS Controls v8.1.2 AI Security Guidance Workbook translates that guidance into a practical, interactive spreadsheet built for real-world implementation across three core AI security domains: asset visibility and governance, secure software and supply chain management, and data protection across the AI lifecycle.
An Actionable Workbook for the Full AI Lifecycle
Developed for the individuals responsible for designing, governing, and overseeing secure AI systems, the workbook helps teams:
- Map AI controls directly to assets, systems, and workflows
- Track implementation across LLMs, agents, and MCP components
- Align teams on ownership, risk prioritization, and accountability
- Filter and operationalize safeguards by function, asset type, and control domain
From autonomous agent decision-making and tool access governance to continuous monitoring of system activity, data flows, and permissions, the workbook brings structure to every stage of the AI lifecycle. Teams gain centralized visibility, reduce unauthorized actions, and detect anomalies all within a consistent, CIS Controls–aligned framework.
AI Security Guidance That Brings Clarity to Complexity
Apply the CIS Controls to modern AI systems and operationalize security across LLMs, agents, and MCP environments with the actionable workbook that helps you bring visibility, control, and consistency to your organization’s AI use.
As of June 23, 2025, the MS-ISAC has introduced a fee-based membership. Any potential reference to no-cost MS-ISAC services no longer applies.