ISO/IEC 23894 is guidance, not a certifiable scheme. OptimaTrust records multi-factor AI risk — security, safety, privacy, agentic risk, supply chain — with listed factors. Empty factors stay empty. This is technical risk intelligence for AI systems, not enterprise ERM.
How OptimaTrust helps
- Score risk from stored findings and tests
- Keep agentic-risk scenarios (excessive agency, tool abuse, loops)
- Feed residual risk into reports without inventing a 100
