AIUC-1 changelog | AIUC-1

as of April 15, 2026

Context

Introduction Certificate overview

Framework comparisons

EU AI Act ISO 42001 MITRE ATLAS NIST AI RMF OWASP Top 10 for LLM Applications OWASP AIVSS OWASP Top 10 for Agentic Applications IBM AI Risk Atlas Cisco AI Security & Safety CSA AICM

Changelog AIUC-1 Consortium Provide input on AIUC-1 Contact

Standard

A. Data & Privacy

Establish input data policy Establish output data policy Limit AI agent data access Protect IP & trade secrets Prevent cross-customer data exposure Prevent PII leakage Prevent IP violations

Third-party testing of adversarial robustness Detect adversarial input Manage public release of technical details Prevent AI endpoint scraping Implement real-time input filtering Prevent unauthorized AI agent actions Enforce user access privileges to AI systems Protect AI system deployment environment Limit output over-exposure

Define AI risk taxonomy Conduct pre-deployment testing Prevent harmful outputs Prevent out-of-scope outputs Prevent customer-defined high risk outputs Prevent output vulnerabilities Flag high risk outputs for human review Monitor AI risk categories Enable real-time feedback and intervention Third-party testing for harmful outputs Third-party testing for out-of-scope outputs Third-party testing for customer-defined risk

Prevent hallucinated outputs Third-party testing for hallucinations Restrict unsafe tool calls Third-party testing of tool calls

E. Accountability

AI failure plan for security breaches AI failure plan for harmful outputs AI failure plan for hallucinations Assign accountability Document data storage security Conduct vendor due diligence [Retired] Document system change approvals Review internal processes Monitor third-party access Establish AI acceptable use policy Record processing locations Document regulatory compliance Implement quality management system [Retired] Share transparency reports Log AI system activity Implement AI disclosure mechanisms Document system transparency policy

Prevent AI cyber misuse Prevent catastrophic misuse

Certification

AIUC-1 certification Scoping Accredited auditors Re-certification FAQ

Evidence overview

Full evidence list Technical evidence Legal evidence Operational evidence Third-party evals Capability-specific evidence

→

2026-04-15

April 15, 2026 release

For this update, focus has been on MCP and A2A protocol security, third-party risk management, and agent identity and access management. This quarter’s refresh updates 14 requirements and 23 controls.

Overview of key updates

Introduced new controls for MCP and A2A protocol security, standardizing authentication, transport, runtime containment, and logging across agentic interfaces

Expanded third-party risk controls including making third-party access monitoring mandatory

Expanded controls for agent identity, permissions, and access management

Detailed changelog

Date

AIUC-1 Requirement and Control

Category

Change Notes

Date

Q2 2026

AIUC-1 Requirement and Control

Category

Change Notes

Date

Q2 2026

AIUC-1 Requirement and Control

Category

Change Notes

Detailed side-by-side comparison

Detailed comparison of previous standards (October 1, 2025 and January 15, 2026) and current standard (April 15, 2026) is available on Github here