Download HAIAMM v3.0

Download the v3.0 handbook, executive summary, model master, and the full set of practice one-pagers and assessment questionnaires.

Framework Documentation (v3.0)

Core HAIAMM v3.0 reference material, handbook, executive summary, model master, and supporting frameworks.

HAIAMM Handbook v3.0 (PDF)
Complete v3.0 framework reference, 4 business functions, 12 practices, 6 domains, 3 maturity levels, 216 canonical cells, MITRE ATLAS integration, HAI-specific TTPs, priority compliance map
Download
HAIAMM v3.0, Executive Summary
What HAIAMM v3.0 is, why it exists, what it contains, and how it relates to OpenSAMM/BSIMM, NIST AI RMF, ISO/IEC 42001, OWASP LLM, and MITRE ATLAS
Download
HAIAMM v3.0, Model Master
Canonical source of truth for v3.0 subject, structure, and authoring rules. Every (domain × practice × level) cell must conform to what is declared here
Download
HAIAMM Handbook (v3.0, markdown)
Practitioner handbook, markdown source of the v3.0 reference. Use alongside the PDF for searchability and AI-assisted reading
Download
Unified Metrics Framework
Outcome-based metrics across all 12 practices, measure real security posture, not activity. Reframed for v3.0
Download
NIST AI RMF Playbook Mapping
Mapping from HAIAMM v3.0 practices to NIST AI RMF 1.0 + Playbook (GOVERN, MAP, MEASURE, MANAGE) for complementary risk-framework adopters
Download
HAIAMM Handbook v2.0 (PDF, archived)
Prior version of the handbook, kept for reference. v2.0 framed AI as a security tool (AI doing SAST/DLP/SOC); this framing is retired in v3.0. Use v3.0 for new programs
Download
Vendors Domain Handbook (v3.0)
Self-contained practitioner handbook for the Vendors domain. Five AI vendor archetypes, all 12 practices at L1/L2/L3, complete 108-question assessment workbook. Shadow AI reduction is the primary L1 outcome. 2,971 lines
Download
Software Domain Handbook (v3.0)
Self-contained practitioner handbook for the Software domain. Seven AI software archetypes (LLM-integrated app, AI agent, RAG pipeline, fine-tuning/training workload, eval harness, model-serving service, classical ML). HAI TTPs (EA/AGH/TM/RA) threaded throughout. 3,130 lines
Download
Data Domain Handbook (v3.0)
Self-contained practitioner handbook for the Data domain. Seven AI data archetypes (training corpus, inference input stream, retrieval store, prompt/completion log corpus, embedding store, fine-tuning dataset, evaluation/test set). 2,885 lines
Download
Processes Domain Handbook (v3.0)
Self-contained practitioner handbook for the Processes domain. Seven AI-embedded workflow archetypes. EU AI Act Art. 14 human oversight, Art. 22 GDPR safeguards, Art. 50 transparency, and the FRIA gate for Annex III are central. 3,107 lines
Download
Endpoints Domain Handbook (v3.0)
Self-contained practitioner handbook for the Endpoints domain. Seven AI endpoint archetypes (assistant, browser-based AI tool, chatbot, multi-modal, SaaS-AI, mobile AI app, edge AI device). EU AI Act Art. 50 disclosure UX, MDM allowlist, browser-extension governance, SaaS-AI silent-enablement detection, mobile/edge integrity. 3,145 lines
Download
Infrastructure Domain Handbook (v3.0)
Self-contained practitioner handbook for the Infrastructure domain. Seven AI infrastructure archetypes (inference endpoint/model-serving cluster, model registry, GPU/accelerator fleet, orchestrator/control plane, vector-store, AI-specific CI/CD, feature store). EU AI Act Art. 15, SLSA provenance, GPU residual-state clearing, orchestrator least-privilege. 3,110 lines
Download

Practice One-Pagers

Detailed guidance for each practice-domain combination including maturity objectives, activities, metrics, and outcomes.

Governance

Strategy & Metrics (SM), Software
Maturity levels 1-3 with activities, metrics, and success indicators
Download
Strategy & Metrics (SM), Data
Maturity levels 1-3 with activities, metrics, and success indicators
Download
Strategy & Metrics (SM), Infrastructure
Maturity levels 1-3 with activities, metrics, and success indicators
Download
Strategy & Metrics (SM), Vendors
Maturity levels 1-3 with activities, metrics, and success indicators
Download
Strategy & Metrics (SM), Processes
Maturity levels 1-3 with activities, metrics, and success indicators
Download
Strategy & Metrics (SM), Endpoints
Maturity levels 1-3 with activities, metrics, and success indicators
Download
Policy & Compliance (PC), Software
Maturity levels 1-3 with activities, metrics, and success indicators
Download
Policy & Compliance (PC), Data
Maturity levels 1-3 with activities, metrics, and success indicators
Download
Policy & Compliance (PC), Infrastructure
Maturity levels 1-3 with activities, metrics, and success indicators
Download
Policy & Compliance (PC), Vendors
Maturity levels 1-3 with activities, metrics, and success indicators
Download
Policy & Compliance (PC), Processes
Maturity levels 1-3 with activities, metrics, and success indicators
Download
Policy & Compliance (PC), Endpoints
Maturity levels 1-3 with activities, metrics, and success indicators
Download
Education & Guidance (EG), Software
Maturity levels 1-3 with activities, metrics, and success indicators
Download
Education & Guidance (EG), Data
Maturity levels 1-3 with activities, metrics, and success indicators
Download
Education & Guidance (EG), Infrastructure
Maturity levels 1-3 with activities, metrics, and success indicators
Download
Education & Guidance (EG), Vendors
Maturity levels 1-3 with activities, metrics, and success indicators
Download
Education & Guidance (EG), Processes
Maturity levels 1-3 with activities, metrics, and success indicators
Download
Education & Guidance (EG), Endpoints
Maturity levels 1-3 with activities, metrics, and success indicators
Download

Building

Threat Assessment (TA), Software
Maturity levels 1-3 with activities, metrics, and success indicators
Download
Threat Assessment (TA), Data
Maturity levels 1-3 with activities, metrics, and success indicators
Download
Threat Assessment (TA), Infrastructure
Maturity levels 1-3 with activities, metrics, and success indicators
Download
Threat Assessment (TA), Vendors
Maturity levels 1-3 with activities, metrics, and success indicators
Download
Threat Assessment (TA), Processes
Maturity levels 1-3 with activities, metrics, and success indicators
Download
Threat Assessment (TA), Endpoints
Maturity levels 1-3 with activities, metrics, and success indicators
Download
Security Requirements (SR), Software
Maturity levels 1-3 with activities, metrics, and success indicators
Download
Security Requirements (SR), Data
Maturity levels 1-3 with activities, metrics, and success indicators
Download
Security Requirements (SR), Infrastructure
Maturity levels 1-3 with activities, metrics, and success indicators
Download
Security Requirements (SR), Vendors
Maturity levels 1-3 with activities, metrics, and success indicators
Download
Security Requirements (SR), Processes
Maturity levels 1-3 with activities, metrics, and success indicators
Download
Security Requirements (SR), Endpoints
Maturity levels 1-3 with activities, metrics, and success indicators
Download
Security Architecture (SA), Software
Maturity levels 1-3 with activities, metrics, and success indicators
Download
Security Architecture (SA), Data
Maturity levels 1-3 with activities, metrics, and success indicators
Download
Security Architecture (SA), Infrastructure
Maturity levels 1-3 with activities, metrics, and success indicators
Download
Security Architecture (SA), Vendors
Maturity levels 1-3 with activities, metrics, and success indicators
Download
Security Architecture (SA), Processes
Maturity levels 1-3 with activities, metrics, and success indicators
Download
Security Architecture (SA), Endpoints
Maturity levels 1-3 with activities, metrics, and success indicators
Download

Verification

Design Review (DR), Software
Maturity levels 1-3 with activities, metrics, and success indicators
Download
Design Review (DR), Data
Maturity levels 1-3 with activities, metrics, and success indicators
Download
Design Review (DR), Infrastructure
Maturity levels 1-3 with activities, metrics, and success indicators
Download
Design Review (DR), Vendors
Maturity levels 1-3 with activities, metrics, and success indicators
Download
Design Review (DR), Processes
Maturity levels 1-3 with activities, metrics, and success indicators
Download
Design Review (DR), Endpoints
Maturity levels 1-3 with activities, metrics, and success indicators
Download
Implementation Review (IR), Software
Maturity levels 1-3 with activities, metrics, and success indicators
Download
Implementation Review (IR), Data
Maturity levels 1-3 with activities, metrics, and success indicators
Download
Implementation Review (IR), Infrastructure
Maturity levels 1-3 with activities, metrics, and success indicators
Download
Implementation Review (IR), Vendors
Maturity levels 1-3 with activities, metrics, and success indicators
Download
Implementation Review (IR), Processes
Maturity levels 1-3 with activities, metrics, and success indicators
Download
Implementation Review (IR), Endpoints
Maturity levels 1-3 with activities, metrics, and success indicators
Download
Security Testing (ST), Software
Maturity levels 1-3 with activities, metrics, and success indicators
Download
Security Testing (ST), Data
Maturity levels 1-3 with activities, metrics, and success indicators
Download
Security Testing (ST), Infrastructure
Maturity levels 1-3 with activities, metrics, and success indicators
Download
Security Testing (ST), Vendors
Maturity levels 1-3 with activities, metrics, and success indicators
Download
Security Testing (ST), Processes
Maturity levels 1-3 with activities, metrics, and success indicators
Download
Security Testing (ST), Endpoints
Maturity levels 1-3 with activities, metrics, and success indicators
Download

Operations

Issue Management (IM), Software
Maturity levels 1-3 with activities, metrics, and success indicators
Download
Issue Management (IM), Data
Maturity levels 1-3 with activities, metrics, and success indicators
Download
Issue Management (IM), Infrastructure
Maturity levels 1-3 with activities, metrics, and success indicators
Download
Issue Management (IM), Vendors
Maturity levels 1-3 with activities, metrics, and success indicators
Download
Issue Management (IM), Processes
Maturity levels 1-3 with activities, metrics, and success indicators
Download
Issue Management (IM), Endpoints
Maturity levels 1-3 with activities, metrics, and success indicators
Download
Environment Hardening (EH), Software
Maturity levels 1-3 with activities, metrics, and success indicators
Download
Environment Hardening (EH), Data
Maturity levels 1-3 with activities, metrics, and success indicators
Download
Environment Hardening (EH), Infrastructure
Maturity levels 1-3 with activities, metrics, and success indicators
Download
Environment Hardening (EH), Vendors
Maturity levels 1-3 with activities, metrics, and success indicators
Download
Environment Hardening (EH), Processes
Maturity levels 1-3 with activities, metrics, and success indicators
Download
Environment Hardening (EH), Endpoints
Maturity levels 1-3 with activities, metrics, and success indicators
Download
Monitoring & Logging (ML), Software
Maturity levels 1-3 with activities, metrics, and success indicators
Download
Monitoring & Logging (ML), Data
Maturity levels 1-3 with activities, metrics, and success indicators
Download
Monitoring & Logging (ML), Infrastructure
Maturity levels 1-3 with activities, metrics, and success indicators
Download
Monitoring & Logging (ML), Vendors
Maturity levels 1-3 with activities, metrics, and success indicators
Download
Monitoring & Logging (ML), Processes
Maturity levels 1-3 with activities, metrics, and success indicators
Download
Monitoring & Logging (ML), Endpoints
Maturity levels 1-3 with activities, metrics, and success indicators
Download

Assessment Questionnaires (v3.0)

Self-assessment questionnaires with outcome-metrics scoring, every question tied to a measurable security outcome with baseline, target, and source. One questionnaire per (domain × practice) pair.

DR-Data Questionnaire
Level 1-3 assessment questions with evidence checklists
Download
DR-Endpoints Questionnaire
Level 1-3 assessment questions with evidence checklists
Download
DR-Infrastructure Questionnaire
Level 1-3 assessment questions with evidence checklists
Download
DR-Processes Questionnaire
Level 1-3 assessment questions with evidence checklists
Download
DR-Software Questionnaire
Level 1-3 assessment questions with evidence checklists
Download
DR-Vendors Questionnaire
Level 1-3 assessment questions with evidence checklists
Download
EG-Data Questionnaire
Level 1-3 assessment questions with evidence checklists
Download
EG-Endpoints Questionnaire
Level 1-3 assessment questions with evidence checklists
Download
EG-Infrastructure Questionnaire
Level 1-3 assessment questions with evidence checklists
Download
EG-Processes Questionnaire
Level 1-3 assessment questions with evidence checklists
Download
EG-Software Questionnaire
Level 1-3 assessment questions with evidence checklists
Download
EG-Vendors Questionnaire
Level 1-3 assessment questions with evidence checklists
Download
EH-Data Questionnaire
Level 1-3 assessment questions with evidence checklists
Download
EH-Endpoints Questionnaire
Level 1-3 assessment questions with evidence checklists
Download
EH-Infrastructure Questionnaire
Level 1-3 assessment questions with evidence checklists
Download
EH-Processes Questionnaire
Level 1-3 assessment questions with evidence checklists
Download
EH-Software Questionnaire
Level 1-3 assessment questions with evidence checklists
Download
EH-Vendors Questionnaire
Level 1-3 assessment questions with evidence checklists
Download
IM-Data Questionnaire
Level 1-3 assessment questions with evidence checklists
Download
IM-Endpoints Questionnaire
Level 1-3 assessment questions with evidence checklists
Download
IM-Infrastructure Questionnaire
Level 1-3 assessment questions with evidence checklists
Download
IM-Processes Questionnaire
Level 1-3 assessment questions with evidence checklists
Download
IM-Software Questionnaire
Level 1-3 assessment questions with evidence checklists
Download
IM-Vendors Questionnaire
Level 1-3 assessment questions with evidence checklists
Download
IR-Data Questionnaire
Level 1-3 assessment questions with evidence checklists
Download
IR-Endpoints Questionnaire
Level 1-3 assessment questions with evidence checklists
Download
IR-Infrastructure Questionnaire
Level 1-3 assessment questions with evidence checklists
Download
IR-Processes Questionnaire
Level 1-3 assessment questions with evidence checklists
Download
IR-Software Questionnaire
Level 1-3 assessment questions with evidence checklists
Download
IR-Vendors Questionnaire
Level 1-3 assessment questions with evidence checklists
Download
ML-Data Questionnaire
Level 1-3 assessment questions with evidence checklists
Download
ML-Endpoints Questionnaire
Level 1-3 assessment questions with evidence checklists
Download
ML-Infrastructure Questionnaire
Level 1-3 assessment questions with evidence checklists
Download
ML-Processes Questionnaire
Level 1-3 assessment questions with evidence checklists
Download
ML-Software Questionnaire
Level 1-3 assessment questions with evidence checklists
Download
ML-Vendors Questionnaire
Level 1-3 assessment questions with evidence checklists
Download
PC-Data Questionnaire
Level 1-3 assessment questions with evidence checklists
Download
PC-Endpoints Questionnaire
Level 1-3 assessment questions with evidence checklists
Download
PC-Infrastructure Questionnaire
Level 1-3 assessment questions with evidence checklists
Download
PC-Processes Questionnaire
Level 1-3 assessment questions with evidence checklists
Download
PC-Software Questionnaire
Level 1-3 assessment questions with evidence checklists
Download
PC-Vendors Questionnaire
Level 1-3 assessment questions with evidence checklists
Download
SA-Data Questionnaire
Level 1-3 assessment questions with evidence checklists
Download
SA-Endpoints Questionnaire
Level 1-3 assessment questions with evidence checklists
Download
SA-Infrastructure Questionnaire
Level 1-3 assessment questions with evidence checklists
Download
SA-Processes Questionnaire
Level 1-3 assessment questions with evidence checklists
Download
SA-Software Questionnaire
Level 1-3 assessment questions with evidence checklists
Download
SA-Vendors Questionnaire
Level 1-3 assessment questions with evidence checklists
Download
SM-Data Questionnaire
Level 1-3 assessment questions with evidence checklists
Download
SM-Endpoints Questionnaire
Level 1-3 assessment questions with evidence checklists
Download
SM-Infrastructure Questionnaire
Level 1-3 assessment questions with evidence checklists
Download
SM-Processes Questionnaire
Level 1-3 assessment questions with evidence checklists
Download
SM-Software Questionnaire
Level 1-3 assessment questions with evidence checklists
Download
SM-Vendors Questionnaire
Level 1-3 assessment questions with evidence checklists
Download
SR-Data Questionnaire
Level 1-3 assessment questions with evidence checklists
Download
SR-Endpoints Questionnaire
Level 1-3 assessment questions with evidence checklists
Download
SR-Infrastructure Questionnaire
Level 1-3 assessment questions with evidence checklists
Download
SR-Processes Questionnaire
Level 1-3 assessment questions with evidence checklists
Download
SR-Software Questionnaire
Level 1-3 assessment questions with evidence checklists
Download
SR-Vendors Questionnaire
Level 1-3 assessment questions with evidence checklists
Download
ST-Data Questionnaire
Level 1-3 assessment questions with evidence checklists
Download
ST-Endpoints Questionnaire
Level 1-3 assessment questions with evidence checklists
Download
ST-Infrastructure Questionnaire
Level 1-3 assessment questions with evidence checklists
Download
ST-Processes Questionnaire
Level 1-3 assessment questions with evidence checklists
Download
ST-Software Questionnaire
Level 1-3 assessment questions with evidence checklists
Download
ST-Vendors Questionnaire
Level 1-3 assessment questions with evidence checklists
Download
TA-Data Questionnaire
Level 1-3 assessment questions with evidence checklists
Download
TA-Endpoints Questionnaire
Level 1-3 assessment questions with evidence checklists
Download
TA-Infrastructure Questionnaire
Level 1-3 assessment questions with evidence checklists
Download
TA-Processes Questionnaire
Level 1-3 assessment questions with evidence checklists
Download
TA-Software Questionnaire
Level 1-3 assessment questions with evidence checklists
Download
TA-Vendors Questionnaire
Level 1-3 assessment questions with evidence checklists
Download

CI/CD Assessment Templates

Machine-parseable markdown templates for DevOps integration. Use grep or sed on HTML comments to extract answers and scores in CI/CD pipelines. Compatible with GitHub Actions and verifhai DevOps workflows.

Each template uses <!-- answer: null --> style markers for machine parsing. Example: grep -oP '<!-- answer: \K[^-]+(?= -->)'

DR-Data Assessment Template
Machine-parseable CI/CD template with scoring markers
Download
DR-Endpoints Assessment Template
Machine-parseable CI/CD template with scoring markers
Download
DR-Infrastructure Assessment Template
Machine-parseable CI/CD template with scoring markers
Download
DR-Processes Assessment Template
Machine-parseable CI/CD template with scoring markers
Download
DR-Software Assessment Template
Machine-parseable CI/CD template with scoring markers
Download
DR-Vendors Assessment Template
Machine-parseable CI/CD template with scoring markers
Download
EG-Data Assessment Template
Machine-parseable CI/CD template with scoring markers
Download
EG-Endpoints Assessment Template
Machine-parseable CI/CD template with scoring markers
Download
EG-Infrastructure Assessment Template
Machine-parseable CI/CD template with scoring markers
Download
EG-Processes Assessment Template
Machine-parseable CI/CD template with scoring markers
Download
EG-Software Assessment Template
Machine-parseable CI/CD template with scoring markers
Download
EG-Vendors Assessment Template
Machine-parseable CI/CD template with scoring markers
Download
EH-Data Assessment Template
Machine-parseable CI/CD template with scoring markers
Download
EH-Endpoints Assessment Template
Machine-parseable CI/CD template with scoring markers
Download
EH-Infrastructure Assessment Template
Machine-parseable CI/CD template with scoring markers
Download
EH-Processes Assessment Template
Machine-parseable CI/CD template with scoring markers
Download
EH-Software Assessment Template
Machine-parseable CI/CD template with scoring markers
Download
EH-Vendors Assessment Template
Machine-parseable CI/CD template with scoring markers
Download
IM-Data Assessment Template
Machine-parseable CI/CD template with scoring markers
Download
IM-Endpoints Assessment Template
Machine-parseable CI/CD template with scoring markers
Download
IM-Infrastructure Assessment Template
Machine-parseable CI/CD template with scoring markers
Download
IM-Processes Assessment Template
Machine-parseable CI/CD template with scoring markers
Download
IM-Software Assessment Template
Machine-parseable CI/CD template with scoring markers
Download
IM-Vendors Assessment Template
Machine-parseable CI/CD template with scoring markers
Download
IR-Data Assessment Template
Machine-parseable CI/CD template with scoring markers
Download
IR-Endpoints Assessment Template
Machine-parseable CI/CD template with scoring markers
Download
IR-Infrastructure Assessment Template
Machine-parseable CI/CD template with scoring markers
Download
IR-Processes Assessment Template
Machine-parseable CI/CD template with scoring markers
Download
IR-Software Assessment Template
Machine-parseable CI/CD template with scoring markers
Download
IR-Vendors Assessment Template
Machine-parseable CI/CD template with scoring markers
Download
ML-Data Assessment Template
Machine-parseable CI/CD template with scoring markers
Download
ML-Endpoints Assessment Template
Machine-parseable CI/CD template with scoring markers
Download
ML-Infrastructure Assessment Template
Machine-parseable CI/CD template with scoring markers
Download
ML-Processes Assessment Template
Machine-parseable CI/CD template with scoring markers
Download
ML-Software Assessment Template
Machine-parseable CI/CD template with scoring markers
Download
ML-Vendors Assessment Template
Machine-parseable CI/CD template with scoring markers
Download
PC-Data Assessment Template
Machine-parseable CI/CD template with scoring markers
Download
PC-Endpoints Assessment Template
Machine-parseable CI/CD template with scoring markers
Download
PC-Infrastructure Assessment Template
Machine-parseable CI/CD template with scoring markers
Download
PC-Processes Assessment Template
Machine-parseable CI/CD template with scoring markers
Download
PC-Software Assessment Template
Machine-parseable CI/CD template with scoring markers
Download
PC-Vendors Assessment Template
Machine-parseable CI/CD template with scoring markers
Download
SA-Data Assessment Template
Machine-parseable CI/CD template with scoring markers
Download
SA-Endpoints Assessment Template
Machine-parseable CI/CD template with scoring markers
Download
SA-Infrastructure Assessment Template
Machine-parseable CI/CD template with scoring markers
Download
SA-Processes Assessment Template
Machine-parseable CI/CD template with scoring markers
Download
SA-Software Assessment Template
Machine-parseable CI/CD template with scoring markers
Download
SA-Vendors Assessment Template
Machine-parseable CI/CD template with scoring markers
Download
SM-Data Assessment Template
Machine-parseable CI/CD template with scoring markers
Download
SM-Endpoints Assessment Template
Machine-parseable CI/CD template with scoring markers
Download
SM-Infrastructure Assessment Template
Machine-parseable CI/CD template with scoring markers
Download
SM-Processes Assessment Template
Machine-parseable CI/CD template with scoring markers
Download
SM-Software Assessment Template
Machine-parseable CI/CD template with scoring markers
Download
SM-Vendors Assessment Template
Machine-parseable CI/CD template with scoring markers
Download
SR-Data Assessment Template
Machine-parseable CI/CD template with scoring markers
Download
SR-Endpoints Assessment Template
Machine-parseable CI/CD template with scoring markers
Download
SR-Infrastructure Assessment Template
Machine-parseable CI/CD template with scoring markers
Download
SR-Processes Assessment Template
Machine-parseable CI/CD template with scoring markers
Download
SR-Software Assessment Template
Machine-parseable CI/CD template with scoring markers
Download
SR-Vendors Assessment Template
Machine-parseable CI/CD template with scoring markers
Download
ST-Data Assessment Template
Machine-parseable CI/CD template with scoring markers
Download
ST-Endpoints Assessment Template
Machine-parseable CI/CD template with scoring markers
Download
ST-Infrastructure Assessment Template
Machine-parseable CI/CD template with scoring markers
Download
ST-Processes Assessment Template
Machine-parseable CI/CD template with scoring markers
Download
ST-Software Assessment Template
Machine-parseable CI/CD template with scoring markers
Download
ST-Vendors Assessment Template
Machine-parseable CI/CD template with scoring markers
Download
TA-Data Assessment Template
Machine-parseable CI/CD template with scoring markers
Download
TA-Endpoints Assessment Template
Machine-parseable CI/CD template with scoring markers
Download
TA-Infrastructure Assessment Template
Machine-parseable CI/CD template with scoring markers
Download
TA-Processes Assessment Template
Machine-parseable CI/CD template with scoring markers
Download
TA-Software Assessment Template
Machine-parseable CI/CD template with scoring markers
Download
TA-Vendors Assessment Template
Machine-parseable CI/CD template with scoring markers
Download