DSP 2023.1

Current Release

A major update that added the Artificial Intelligence & Autonomous Technologies (AAT) domain, 78 controls and a new Assessment Objectives list.

Applies To

Digital Security Program (DSP)

Update Scale

Major

Previous Release

None

What Changed In This Release

Added a new domain, Artificial Intelligence & Autonomous Technologies (AAT). 65 of the 78 new controls are in the AAT domain.
Added a new Assessment Objectives (AOs) list to help assess whether the intent of each control is met.
Added mapping for 8 frameworks, including the NIST AI Risk Management Framework (AI RMF 1.0), EU DORA and the CISA Cross-Sector Cybersecurity Performance Goals (CPG). Removed MPA Content Security Best Practices v4.1.
Added threats MT-12 Redundant, Obsolete/Outdated, Toxic or Trivial (ROT) Data and MT-13 Artificial Intelligence & Autonomous Technologies (AAT), and risk R-AM-3 Emergent property and/or unintended consequences.
Renamed 8 controls and wordsmithed 21.
Updated mappings for NIST SP 800-53 R5, NIST SP 800-171A, the SCF-I (Cyber Insurance) baseline and the Virginia CDPA 2023.

All Releases

Did You Purchase An Older Version Of This Product?

Releases from before 2024 are significantly out of date. Existing customers are encouraged to repurchase the current version at 50% of the original product price.