Skip to content

Generative AI

What is Generative AI?

Artificial intelligence systems capable of generating text, images, code, audio, and other content. Generative AI raises unique governance challenges around intellectual property, misinformation, bias, and data privacy.

AI & Technology

Each of these is named in at least one of the same controls as generative ai. The number is how many controls name both.

What the standards actually require on generative ai

Requirements naming generative ai across 6 standards, quoted from the control text.

Comply with NIST AI 600-1 Artificial Intelligence Risk Management Framework Generative AI Profile published 26 July 2024 as a companion to NIST AI RMF 1.0 (NIST AI 100-1).

NISTAI600-1 · NIST AI 600-1 Scope and 12 Generative AI Risk Categories →

GenAI framework, Security: separate traditional software security from novel threats to models; adapt security-by-design across development, evaluation, operations and maintenance for natural-language inputs and probabilistic behaviour;

singapore-ai-governance-framework::GEN-6 · Adapt security-by-design to generative AI threats with input filters and forensics →

Where the service uses or provides generative AI capabilities, the provider will take reasonable steps to consider and address safety risks arising from those capabilities.

BOSE-S8A · Additional expectation - reasonable steps regarding generative AI capabilities →

Take the steps needed so that the people within the actor who are involved with AI have AI literacy at a level sufficient for that involvement (the guidelines point to METI and IPA's Digital Skill Standards and their generative-AI additions).

japan-ai-guidelines::C8.1 · 8)(1) Ensuring AI literacy →

Applies to the provision of generative AI services to the public within China to generate text, images, audio or video. Internal research and development not provided to the public is excluded.

CN-GAI-A2 · Scope of Application →

Questions people ask about generative ai

What is Generative AI?
Artificial intelligence systems capable of generating text, images, code, audio, and other content. Generative AI raises unique governance challenges around intellectual property, misinformation, bias, and data privacy.
Why is Generative AI important for compliance?
Generative AI is a key concept in AI & Technology. Understanding generative ai helps organizations meet regulatory requirements, reduce risk, and demonstrate due diligence during audits. Our compliance platform maps 1,016 frameworks with 316K cross-framework control mappings.
Which compliance frameworks address Generative AI?
Generative AI appears in the requirement text of Hong Kong Personal Data (Privacy) Ordinance (PDPO, Cap 486), NIST AI 600-1: Generative AI Profile, Singapore AI Governance Framework, Australia eSafety Commissioner - Online Safety Expectations for Industry, Japan AI Guidelines. Across these standards we have identified 22 controls that name it directly, each linked to the control text on the compliance platform.
Where can I learn more about Generative AI?
Explore our compliance framework pages to see how generative ai applies across different standards and regulations. Our implementation guides provide step-by-step guidance, and the compliance platform offers AI-powered analysis of how this concept maps across 1,016 frameworks.

See how Generative AI applies across compliance frameworks

Our platform maps 1,016 frameworks with 316K cross-framework control mappings. Explore how this concept is addressed across standards.

Written and maintained by Gerard Blokdyk, The Art of Service.