The tool aims to help companies understand the first steps toward certification in an environment where artificial intelligence has elevated hacking risks.