📚 Resources

• G7 / CISA guidance on SBOM for AI: https://industrialcyber.co/sbom/cisa-g7-partners-release-sbom-for-ai-guidance-to-boost-ai-supply-chain-transparency-and-cybersecurity-resilience/
• Sigstore (Cosign, Fulcio, Rekor) for model/artifact signing: https://openssf.org/tag/sigstore/
• Safetensors format and Hugging Face model scanning: https://huggingface.co/docs/microsoft-azure/security
• ModelScan (Protect AI): https://github.com/protectai/modelscan
• Safetensors audited as really safe — Hugging Face blog: https://huggingface.co/blog/safetensors-security-audit
• ML-BOM — CycloneDX: https://cyclonedx.org/capabilities/mlbom/

Week 11 · AI Governance Frameworks: NIST AI RMF, ISO/IEC 42001, and the EU AI Act

Notion ID: 392c08fd-0278-8120-be8e-f73de0e02297 Notion URL: https://app.notion.com/p/392c08fd02788120be8ef73de0e02297