SETTING GLOBAL STANDARDS FOR TRUSTED AI CREDENTIALSAI Competence Framework v1.29 · current release
AI Certification Standards
Apply for conformance
You are reading the current version of the framework, v1.29.Permanent address for this version
D8.L3.07ACTIVESTABLED8 Security · L3 Proficient

Design least-privilege access for systems acting on behalf of people.

Type Skill · introduced in version 0.1

Performance indicators

Normative. These state what would be observed in a person who holds the statement.

Separates the system’s identity from the person’s where it acts without them
Scopes access to the task rather than inheriting the person’s full entitlement
Provides for revocation, and for audit of what was actually accessed
Evidence examples

Non-normative. Illustrative of evidence an awarding body might accept; not a required form.

A worked artefact produced in the course of normal duties, with the reasoning recorded at the time
Attestation by a competent supervisor against the indicators above, not against a general impression
Relationships

Assumes

Statements a candidate is taken to hold already. Never at a higher level than this one.

D8.L2.03

Configure an AI system’s access so that it holds only the permissions its task requires.

Assumed by

Derived inverse. Statements that take this one as given.

X-AGT.L3.01

Design an agent’s tool access and authorisation boundaries.

X-RAG.L3.04

Design access control so retrieval respects the requester’s entitlements.

Related

Cross-domain relationships, stated in both directions and typed in the content model.

D6.L3.08

Review an incident involving AI output and identify the assurance gap that allowed it.

Referenced by

Entries on the register of conformance claims whose coverage map cites this statement.

No entry on the register cites this statement. This block is populated from the coverage maps of register entries as they are listed.

Provenance
IntroducedVersion 0.1
Last modifiedNot modified since introduction
Statusactive · stable
Version displayedv1.29
Permanent URLaicertificationstandards.org/framework/statements/D8.L3.07
Cite this statement

AI Certification Standards (2026) AICF D8.L3.07, D8 Security, version 1.29. Available at aicertificationstandards.org/framework/v1.29/statements/D8.L3.07 (accessed date).

Propose an amendment

Statements change through the published process, not by correspondence

An amendment to this statement, its indicators or its relationships is proposed through the contribution process. Every submission is answered on the record, and the reasoning for acceptance or rejection is published in the release record for the version that follows.

Propose an amendment to D8.L3.07

Writing rules and the controlled verb list that govern how this statement is worded are published in the methodology.

This page displays version 1.29 · last reviewed 30.08.2026