Cloud Security Alliance
frameworkactive

Agentic AI Threat Modeling Framework: MAESTRO

Cloud Security Alliance

View original resource

Cloud Security Alliance's MAESTRO threat-modelling methodology for multi-agent and agentic systems, extending STRIDE-style analysis across seven architectural layers (foundation model, data, deployment, observability, security, compliance, agent ecosystem) with example threats and controls.

Tags

agentic AIrisks

At a glance

Published

2025

Jurisdiction

Global

Category

Risks and challenges

Access

Public access

More in Risks and challenges

ICO tech futures: Agentic AI

UK Information Commissioner's Office • 2026

International AI Safety Report 2026

Yoshua Bengio et al., UK DSIT • 2026

Agent Skills Enable a New Class of Realistic and Trivially Simple Prompt Injections

Schmotz, Abdelnabi, Andriushchenko • 2025

Related resources

Practices for governing agentic AI systems: OpenAI's seven safety principles

Governance frameworks • OpenAI

Taxonomy of Failure Mode in Agentic AI Systems

Risk taxonomies • Microsoft

The agentic AI landscape and its conceptual foundations

Foundations • OECD

Build your AI governance program

VerifyWise helps you implement AI governance frameworks, track compliance, and manage risk across your AI systems.

Explore the libraryStart free trial
Agentic AI Threat Modeling Framework: MAESTRO | VerifyWise AI Governance Library