.png)
How does Tumeryk support CSA RiskRubric™ v2?
Learn how Tumeryk uses automated testing and AI Trust Score™ to operationalize the Cloud Security Alliance RiskRubric™ v2 methodology.
The Cloud Security Alliance (CSA) RiskRubric™ v2 is an open, evidence-based methodology designed to provide a structured approach to evaluating AI risk.
Tumeryk worked with the Cloud Security Alliance on RiskRubric™ v2 and helps organizations operationalize the methodology through automated AI testing and AI Trust Score™.
What does RiskRubric™ v2 assess?
RiskRubric™ v2 evaluates AI risk across six pillars:
- Security
- Privacy
- Reliability
- Safety & Societal Impact
- Transparency
- Excessive Agency
Together, these dimensions provide a broader view of AI risk than traditional model-performance benchmarks alone.
From methodology to technical evidence
Tumeryk helps translate RiskRubric™ principles into technical assessment workflows.
Rather than relying solely on questionnaires or self-attestation, AI systems can be subjected to automated adversarial and risk-focused testing to generate observable evidence of their behavior.
Testing can examine failure modes such as:
- Prompt injection and jailbreaks
- System-prompt leakage
- Sensitive-information and privacy exposure
- Hallucination and reliability issues
- Unsafe outputs
- Excessive agency and unauthorized agent or tool behavior
The resulting evidence helps organizations identify weaknesses across relevant RiskRubric™ risk dimensions.
AI Trust Score™
Tumeryk’s AI Trust Score™ converts technical evidence from AI testing, behavioral signals, and risk assessment into a standardized 0–1000 measure of AI trust, with higher scores representing stronger resilience and trustworthiness.
This provides organizations with a quantitative mechanism for understanding AI risk while retaining visibility into the individual risk dimensions and findings that contribute to the assessment.
Assessments can also be repeated as models, applications, prompts, permissions, and configurations change, supporting a more continuous approach to AI risk management.
Independent assessment
The RiskRubric ecosystem recognizes Tumeryk as an independent assessment provider, helping organizations apply the methodology across AI models and applications.
By combining the CSA RiskRubric™ v2 methodology with automated assessment and AI Trust Score™, Tumeryk helps organizations move from high-level AI governance principles toward measurable, evidence-based AI risk assessment.
Learn more
CSA RiskRubric™ v2:
https://riskrubric.ai/
Tumeryk × CSA — Automated AI Risk Scoring for RiskRubric™ v2:
https://tumeryk.com/blog/tumeryk-csa-partnership-automated-ai-risk-scoring-riskrubric-v2
Watch the CSA × Tumeryk RiskRubric™ v2 webinar:
https://tumeryk.com/webinars/ai-trust-score-riskrubric-v2/watch