Page 405 - CyberSecurityEssentialsEnglish

pack to a colleague outside the team.
Output: A pack of two to four pages for one case.
Assessment criterion: A person outside the team can state the purpose, the main risks,
and the decision owner after reading it once.

References and Official Sources
I. Frameworks, Standards, and Official Sources
[1] Civil Resolution Tribunal, British Columbia. Moffatt v. Air Canada, 2024 BCCRT 149

[2] National Institute of Standards and Technology. (2023). Artificial Intelligence Risk
Management Framework (AI RMF 1.0)
[3] International Organization for Standardization. ISO/IEC 42001:2023, Artificial Intelligence

Management Systems
[4] International Organization for Standardization. ISO/IEC 42005:2025, AI System Impact
Assessment

[5] OWASP Gen AI Security Project. (2025). Top 10 for LLM and Generative AI Applications
[6] OWASP Gen AI Security Project. (2026). Top 10 for Agentic Applications
[7] European Commission. AI Act: Regulatory Framework and Application Timeline

[8] European Commission. AI Literacy: Questions and Answers on Article 4
[9] International Organization for Standardization. ISO/IEC 42006:2025, Requirements for

Bodies Auditing and Certifying AI Management Systems
[10] Saudi Data and Artificial Intelligence Authority. AI Ethics Principles and Adoption
Resources
[11] United Arab Emirates Government. Official Artificial Intelligence Resources and Ethics

Guides
[12] Ministry of Communications and Information Technology, Egypt. National AI Strategy,

Second Edition, 2025–2030
[13] National Institute of Standards and Technology. (2024). Generative Artificial Intelligence
Profile (NIST AI 600-1)

[14] International Organization for Standardization. ISO/IEC 23894:2023, Guidance on AI Risk
Management
[15] Coalition for Content Provenance and Authenticity. Content Credentials Technical

Specification 2.4
[16] Organisation for Economic Co-operation and Development. OECD AI Principles
II. Educational Video Resources

[17] National Institute of Standards and Technology. (2023). Introduction to the NIST AI Risk
Management Framework (AI RMF 1.0): An Explainer Video [Video].
https://www.nist.gov/video/introduction-nist-ai-risk-management-framework-ai-rmf-10-

explainer-video. Accessed June 6, 2026
[18] European Commission. AI Literacy and Prohibited Practices in the European AI Act
[Video webinar]. https://www.youtube.com/watch?v=8gtaiZhAVNQ. Accessed June 6, 2026

404