Assessed Intelligence Releases ARISE Framework® v2.1, Governance Operating System for AI, Cyber, Privacy, and Ethics

128 controls, 953 requirements, and 40 published crosswalks give organizations one operating picture for AI, cybersecurity, privacy, and ethics obligations.

CANTON, OH, UNITED STATES, October 29, 2026 /EINPresswire.com/ — Assessed Intelligence recently released version 2.1 of the ARISE Framework^®, a governance operating system that lets organizations run cybersecurity, privacy, ethics, and artificial intelligence (AI) governance as one program instead of four. The release is published at ARISEFramework.com and GitHub under the ARISE Framework^® Public Use License and is free for internal governance, compliance readiness, education, research, and nonprofit use.

A COORDINATION PROBLEM, NOT A CAPABILITY PROBLEM

Most organizations already operate a security program, a privacy program, and a legal compliance function. Each runs against its own framework, keeps its own evidence, and reports to its own committee. AI governance is now arriving as a fourth program with a fourth vocabulary, while the US Federal, State, and city laws; the EU AI Act; and industry rules such as HIPAA. All ask for the same underlying evidence: an inventory, an impact assessment, documented oversight, and proof that controls operate. The risk sits in the gaps between those programs, and each new law becomes a new project rather than a delta against work already done.

ONE CONTROL LIBRARY ACROSS SEVEN DOMAINS

The ARISE Framework^® (Assurance of Responsible, Innovative, & Secure Environments) organizes 128 controls and 953 requirements across seven domains: GOVERN, MANAGE, IDENTIFY, PROTECT, DETECT, RESPOND, and VALIDATE. A control that serves two domains is written once and governed once; incident response, oversight committees, regulatory compliance, and policy families each appear as a single governance function instantiated for AI, cyber, privacy, and ethics rather than as four separate programs. The VALIDATE domain makes testing, internal audit, and independent assurance part of the framework rather than an afterthought.

The ARISE Framework^® is a living framework that currently contains more than 44 published crosswalks, with rationale on mapped rows. Control and requirement IDs are permanent, so organizations that adopted the initial 2025 release can carry evidence forward without fully remapping.

“Organizations do not need a fifth framework; they need to understand how the four they already have align with industry expectations and share one common structure,” said Dr. Joshua Scarpino, CEO, Assessed Intelligence. “ARISE is the operating system underneath those programs. Implement a control once, keep one evidence base, report one framework to the board, and absorb the next statute by checking what it adds. That is how you build governance that holds up when it matters most.”

BUILT TO MAP OUTWARD, NOT TO REPLACE

ARISE­™ does not replace NIST, ISO, or any regulator’s text; it unifies them under one common operating picture, or “Governance Operating System,” so teams can answer requirements and pivot faster. The more than 44 published crosswalks cover the EU AI Act and its six CEN/CENELEC standards (prEN 18228, 18229-1, 18229-2, 18282, 18284, and 18286), alignment with ISO/IEC 42001 and 27001, NIST SP 800-53 and the NIST AI RMF, GDPR, the HIPAA Security Rule, PCI DSS v4.0, BSI C5, the Colorado AI Act, Texas TRAIGA, California SB 53, NYC Local Law 144, OMB M-25-21, and the AIUC-1 Certificate, among others. Each of the six prEN crosswalks covers all 128 controls, which positions adopters for EU AI Act conformity as the harmonized standards are finalized. One control and aligned evidence can therefore satisfy an EU AI Act conformity reviewer, a HIPAA risk analysis, and an ISO 27001 auditor without being rewritten for each.

AVAILABILITY

ARISE Framework^® v2.1.0 is available now at ARISEFramework.com and in the public repository, with controls, requirements, the 38-node taxonomy, and every crosswalk published as CSV so organizations can load them into their own GRC tooling. Internal governance, compliance readiness, education, research, and nonprofit use are free under the ARISE Framework^® Public Use License (Non-Commercial). Commercial use, including consulting, paid audits, or products built on ARISE, requires a commercial license. Assessed Intelligence supports adoption through its IMPLEMENT, OPERATE, VALIDATE, and INNOVATE services, including vCISO and vCRAIO engagements.

ABOUT ASSESSED INTELLIGENCE

Assessed Intelligence is an AI and Cybersecurity advisory and audit firm focused on Secure & Responsible Technology. The firm designs, operates, and can validate security, privacy, and AI governance programs for organizations in regulated and critical sectors. This includes fractional executive leadership through vCISO and vCRAIO roles, and the ability to conduct independent gap assessments for frameworks including ForHumanity, ISO/IEC, CMMC readiness, and red-team review. Assessed Intelligence owns and maintains the ARISE Framework™. Learn more at assessedintelligence.com.

The ARISE Framework name and symbol are registered trademarks of Assessed Intelligence. Third-party use requires a written license.

Marketing
Assessed Intelligence
+1 234-327-2803
info@assessedintelligence.com
Visit us on social media:
LinkedIn
YouTube

Media gallery