AI Governance
Operating models, accountability, lifecycle governance, human oversight, policy and enterprise AI risk management.
RESEARCH • STANDARDS • ADVISORY • EDUCATION
Advancing trustworthy
artificial intelligence.
The Institute for AI Governance, Cybersecurity & Risk Management develops practical frameworks, research and implementation guidance for governing and securing increasingly capable AI systems.
01 / ABOUT
Where AI governance meets security engineering.
AI risk can no longer be treated as a policy problem alone. Effective governance requires standards, technical controls, threat-informed design, rigorous assurance and continuous testing.
IAIGSRM brings these disciplines together in an independent institute model focused on research, education and practical engagement with public, private and non-profit organizations.
02 / FIVE PILLARS
A unified approach to AI risk.
AI Standards & Assurance
Alignment and assessment across ISO/IEC 42001, NIST AI RMF, emerging regulation and control frameworks.
AI Cybersecurity
Security architecture and controls for models, data, RAG, agents, infrastructure, identities and AI supply chains.
AI Threat Modeling
Threat-informed analysis connecting AI attack vectors, system impacts and layered mitigating controls.
AI Red Teaming
Adversarial testing for prompt injection, data leakage, unsafe agency, model abuse and control effectiveness.
03 / SERVICES
From strategy to sustained operation.
Advise
Assess risk, define governance, interpret standards and establish priorities.
Design
Develop architectures, control frameworks, threat models, operating models and assurance programs.
Deliver
Implement controls, assessments, testing programs, governance processes and technical safeguards.
Operate
Support continuous assurance, monitoring, control validation, red teaming and governance maturation.
04 / RESEARCH & PUBLICATIONS
Research intended to become practice.
IAIGSRM develops applied research at the intersection of AI governance, cybersecurity, risk, ethics and assurance, emphasizing methods organizations can implement and evaluate.
Browse the IAIGCRM Research Library →
Explore the IAIGSRM AI Governance, Security & Risk Management Framework, integrating AI Readiness, Audit & Assurance, and Control Delivery. Its three-tier architecture connects threat scenarios, baseline controls mapped to NIST SP 800-53 Rev. 5, ISO/IEC 27002:2022 and ISO/IEC 42001:2023, and enhanced safeguards. A separate AI red teaming capability is informed by Japan AISI methodology.
05 / EDUCATION & TRAINING
Education, Training & AI Awareness.
Explore AI history, practical literacy and safety modules, proposed academic curricula, and AI ethics education. Visit the Education & Training Center →
01
Individual AI Literacy & Awareness
Practical precautions for personal privacy, safe prompting, identifying suspicious outputs and protecting sensitive information.
02
Enterprise AI Awareness
Guidance for approved workplace AI use, information classification, enterprise assistants, access permissions and reporting potential disclosures.
Additional checklists and articles are planned.
03
Security Professional Education
Practical checklists and awareness guidance on prompt injection, AI-enabled social engineering, agent permissions, model-output validation and defensive testing.
Additional technical guidance is planned.
04
History, Academic Curricula & Ethics
Explore the history of artificial intelligence, proposed undergraduate and graduate syllabuses, and an educational introduction to AI ethics and morality.
06 / FOUNDER
Stephen Buerle, PhD, CISSP, CISM
Founder, Executive Director & Head of Research
Interdisciplinary Foundations
Dr. Buerle's engagement with technology began early in high school, when he developed software and assistive technologies for individuals with disabilities. His subsequent career has spanned cybersecurity engineering, international security, academic research, and enterprise technology leadership.
He served as Network Security Officer at the International Atomic Energy Agency (IAEA), supporting the Department of Safeguards through secure infrastructure, authentication, access control, and cryptographic services in support of international nuclear non-proliferation. On behalf of the IAEA, he also provided cybersecurity consultation to the Comprehensive Nuclear-Test-Ban Treaty Organization (CTBTO), including secure sensor system design and data acquisition.
Cybersecurity Leadership and Academic Research
Over several decades, Dr. Buerle has led initiatives spanning cybersecurity architecture, identity and access management, data protection, network threat detection and monitoring, security information and event management (SIEM), applied cryptography, security operations, and applied research. More recently, his work has focused on second-line cybersecurity governance, including the development and oversight of mandatory security controls for artificial intelligence and machine learning workloads.
At Unisys, his responsibilities included cybersecurity engineering and federally funded cybersecurity and counterterrorism research supporting U.S. agencies, including DHS, CBP, FDA, and TSA. His career has also included cybersecurity and identity consulting as a subcontractor for General Electric, alongside senior cybersecurity architecture, engineering, and governance leadership roles at JPMorgan Chase, IBM, and Kyndryl.
He earned his doctorate at the University at Albany, where his research examined machine learning, biometric authentication, and ontological knowledge representation for positive identification. His academic experience includes teaching at New York University (NYU) and Marist College, covering cybersecurity, penetration testing, information assurance, systems analysis and design, software development, programming languages, network analysis and design, and related technical disciplines.
Research and the Institute
Dr. Buerle founded the Institute for AI Governance, Cybersecurity & Risk Management (IAIGCRM) to advance interdisciplinary research at the intersection of artificial intelligence, cybersecurity, governance, and societal risk.
The Institute's research encompasses AI assurance, explainability, adversarial testing, machine morality, and systemic and existential risks associated with increasingly capable AI systems. Its work emphasizes evidence-based inquiry, transparent accountability, human oversight, and the responsible development and governance of artificial intelligence.
07 / CONTACT
Build AI systems worthy of trust.
IAIGSRM is being established as an independent institute for research, education, advisory and technical engagement in AI governance, security and risk management.
Start a conversation