AIUC-1: The AI Agent Security, Safety & Reliability Standard

AIUC-1 directly addresses AI agent security and safety risks. If your organization is deploying or procuring AI agents, this standard provides a structured framework to evaluate vendor controls and reduce your attack surface from agentic AI.

• ☐Assess current AI agent deployments against AIUC-1's six control domains
• ☐Require AIUC-1 certification in AI agent vendor procurement criteria
• ☐Review quarterly technical testing requirements for ongoing assurance

AIUC-1 certification takes 5–10 weeks and provides a structured path to demonstrate AI agent governance. The standard is updated quarterly, so plan for ongoing compliance as requirements evolve.

• ☐Map existing AI governance controls to AIUC-1's 50+ requirements
• ☐Engage Schellman or 360 Advanced for a gap assessment
• ☐Budget for annual certification renewal with quarterly technical testing

AIUC-1 is an industry standard, not a regulatory requirement. However, it is gaining traction as a market expectation for AI agent vendors. Certification strengthens due diligence arguments and may reduce liability exposure from AI agent incidents.

• ☐Evaluate AIUC-1 certification as a contractual requirement for AI agent vendors
• ☐Monitor regulatory developments referencing AIUC-1 as a conformity mechanism
• ☐Review insurance implications of AIUC-1's accountability controls

Protects users and enterprises against data and privacy risks through customer data policies, access controls, and safeguards against data leakage, IP exposure, and unauthorized training on user information.

Covers protection against attacks and vulnerabilities in AI agent systems, including threat modeling, pre-deployment testing, and ongoing security monitoring.

Implements safeguards to prevent harmful outputs including distressed outputs, high-risk advice, offensive content, bias, and deception from AI agents.