SRIDA-CERTIN-AISA-RTP-001 · Version 1.0 · 763 pages · by Rajendra Bodda, CISO
CERT-In AI Security Auditing Guidelines v1.0 — Requirements, Implementation Guidance & Audit Testing Procedures
A complete testing companion to CERT-In's AI Security Auditing Guidelines.
763
pages
163
control areas
32
review observations
Why this manual matters
CERT-In's AI Security Auditing Guidelines set out how AI systems in India should be risk-tiered and audited — across governance, data, models, fairness, explainability, security, monitoring, human oversight and the AI supply chain, with extra requirements for generative, RAG, agentic and multi-agent AI.
The Guidelines say what to assess. This manual adds how: every one of the 163 control areas with its tier expectations, implementation guidance, audit testing procedures, evidence and typical finding severity, plus the engagement method, technical test records, reporting, maturity and templates.
It also includes Srida IT's independent review of the Guidelines — 32 observations on consistency and clarity, with an interim interpretation for each — so auditors and auditees can apply them consistently.
What’s inside
163 control areas
Nine core domains plus generative AI, RAG, agentic, multimodal, multi-agent and cyber-physical AI, cybersecurity and contestability — each with tier expectations and tests.
Audit methodology
Risk tiering with worked examples, scoping and Statement of Applicability, sampling, reproducible technical test records and AI-assisted audit safeguards.
Reporting and maturity
Finding classification, assurance opinions, corrective action, the five-level maturity model and crosswalks to ISO/IEC 42001, 27001, 27090 and NIST AI RMF.
Templates and review
Risk-tier worksheet, SoA, engagement checklist, evidence request list, AIBOM, findings, report and the 32-point review of the Guidelines.
Who it is for
- Organisations deploying AI systems in India
- Security auditors and VAPT teams adding AI assurance
- AI governance, risk and compliance teams
- CISOs and boards preparing for AI security audits
Preview before you buy
The free sample has 12 pages: the cover and document control pages, the opening of the contents, the start of Chapter 1 and one complete requirement entry with its testing procedures.
Open the sample PDF in a new tab →How you receive it
- Pay ₹970 by UPI QR and enter your UPI reference at checkout.
- We verify the payment against our bank record, usually within one business day.
- You receive an email with a secure download link (valid 30 days, up to 5 downloads; you can request a fresh link any time).
- Your PDF is stamped with your name, email and a unique licence code on every page.
- For 12 months, every new version of this manual is emailed to you automatically.
Please note
Independent Srida IT guidance; not a CERT-In publication and not endorsed by CERT-In. It does not reproduce the Guidelines' text or imply any empanelment, approval or certification. Some points that depend on external documents should be confirmed against the current source.
Purchases are subject to the Terms and Conditions.