Changelog

Version history of this maturity model. The model version tracks changes to content and structure; the framework version indicates which AWS AI security guidance the controls are aligned to.

1. v1.0.0 2026-09-07 AWS AI Security Framework + SRA for AI
   Initial release: all six capabilities
   • Model structure: 6 SRA capabilities x 3 maturity phases, security domains, and the framework mapping registry (OWASP LLM Top 10 2026).
   • 56 tactical controls across all six capabilities (Model inference, Customization, RAG, Tools, Agents, AI applications), each mapped to the OWASP LLM Top 10 and the applicable GenAI scopes.
   • Full coverage of the OWASP LLM Top 10 (10/10), shown on the coverage and traceability page.
   • Agentic security dimensions (identity, memory, guardrails, boundaries, orchestration, logging) applied to the Tools and Agents capabilities, with a dedicated traceability view.
   • Control-adoption self-assessment tool, with local export/import. Available in English, Spanish, and Portuguese.