What a finished pack can look like
Compatible-standard reports are lenses on AI Controls Matrix (AICM) answers from the function diagnostic — the AI Consensus Assessments Initiative Questionnaire (AI-CAIQ) is the attestation view of that spine, shown as a sample. Not certification.
Function diagnostic · 1 of 4
Which function are you assessing, and for whom?
Name the organization (a label, keep it generic, no sensitive data) and pick the security function. You can assess any org, any function, as many times as you like.
AI maturity is graded as a net addition on these. A certification counts as verified evidence; leave unset if unsure.
Uncheck what doesn’t apply and the diagnostic skips questions about infrastructure you don’t run yourself — keeps the model honest for your environment. Leave all three checked if unsure.