Red Hat Turns AI Policies Into Controls

Red Hat has announced Asago, an open-source project in formation that translates corporate and regulatory AI requirements into operational controls for enterprise deployments.

It maps requirements to resources including the NIST AI Risk Management Framework, OWASP LLM guidance, the EU AI Act, and IBM’s AI Risk Atlas, then generates safety tests, mitigation recommendations, audit evidence, and deployment configurations for hybrid-cloud environments. The initiative could reduce the work required to connect policy obligations with runtime controls, although its maturity and implementation scope remain unestablished.