[{"data":1,"prerenderedAt":10455},["ShallowReactive",2],{"cycle-doc-design-c123-research\u002Fframeworks-dossier.md":3},{"cycle":4,"project":7,"path":10,"title":11,"toc":12,"ast":25},{"id":5,"title":6},"c123","Compliance Frameworks",{"id":8,"label":9},"design","Design","research\u002Fframeworks-dossier.md","AI compliance frameworks: a dossier for Qpoint policy and evidence mapping",[13,14,15,16,17,18,19,20,21,22,23,24],"1. OWASP Top 10 for LLM Applications (2026) and OWASP Top 10 for Agentic Applications (2026)","2. NIST AI Risk Management Framework (AI RMF 1.0, NIST AI 100-1), the Generative AI Profile (NIST AI 600-1) and the NIST AI cybersecurity work","3. SOC 2 (AICPA Trust Services Criteria)","4. AIUC-1 (Artificial Intelligence Underwriting Company standard for AI agents)","5. CSA AI Controls Matrix (AICM) and STAR for AI","6. ISO\u002FIEC 42001:2023 (AI management system) and its companions 42005 and 42006","7. EU Artificial Intelligence Act, Regulation (EU) 2024\u002F1689, as amended by the Digital Omnibus on AI, Regulation (EU) 2026\u002F1744","8. EU Cyber Resilience Act (CRA), Regulation (EU) 2024\u002F2847","9. HITRUST CSF and HITRUST AI assessments","10. ISO\u002FIEC 27001:2022 (ISMS)","11. Cross-cutting synthesis for Qpoint's design","12. Verification log: what I could not confirm",{"type":26,"children":27},"root",[28,49,121,131,279,283,289,296,418,424,439,642,660,676,827,838,844,872,878,891,897,1253,1263,1269,1344,1418,1421,1426,1431,1646,1651,1672,1941,1963,2026,2031,2036,2063,2068,2098,2103,2427,2434,2457,2462,2523,2587,2590,2595,2600,2730,2735,2759,2947,2952,2957,3023,3028,3085,3091,3462,3471,3476,3537,3579,3582,3587,3592,3745,3750,3787,3798,3928,3951,3956,4010,4015,4049,4054,4066,4431,4440,4446,4493,4591,4594,4599,4604,4751,4756,4767,4820,4829,4856,4990,5034,5039,5073,5078,5112,5128,5392,5401,5407,5433,5488,5491,5496,5501,5651,5661,5725,5941,5960,5965,5994,5999,6050,6055,6399,6404,6479,6531,6534,6539,6544,6638,6649,6657,6708,6732,6747,6938,6952,7010,7018,7137,7152,7157,7198,7203,7247,7252,7477,7486,7491,7546,7611,7614,7619,7624,7731,7736,7875,7880,7959,7964,7977,7983,8022,8027,8058,8114,8117,8122,8127,8397,8402,8457,8462,8484,8489,8520,8525,8650,8655,8683,8746,8749,8754,8759,8839,8844,8905,8910,8928,8933,8946,8951,9403,9408,9443,9478,9481,9486,9492,9868,9874,9886,10081,10087,10092,10145,10151,10206,10209,10214],{"type":29,"tag":30,"props":31,"children":32},"element","p",{},[33,40,42,47],{"type":29,"tag":34,"props":35,"children":36},"strong",{},[37],{"type":38,"value":39},"text","As of:",{"type":38,"value":41}," 2026-10-26. ",{"type":29,"tag":34,"props":43,"children":44},{},[45],{"type":38,"value":46},"Prepared for:",{"type":38,"value":48}," Qpoint design (AI governance product: network\u002FeBPF observation of AI providers, models, coding agents\u002Fharnesses, MCP servers, users and data flows on endpoints, plus enforcement: provider allow\u002Fblock lists, sensitive-data redaction, MCP server gating).",{"type":29,"tag":30,"props":50,"children":51},{},[52,57,59,68,70,78,80,88,90,98,100,105,107,112,114,119],{"type":29,"tag":34,"props":53,"children":54},{},[55],{"type":38,"value":56},"How to read this.",{"type":38,"value":58}," Each framework has six parts: (a) identity and status, (b) native structure, (c) who asks for it, (d) how evidence works, (e) what Qpoint can and cannot evidence, (f) official crosswalks. Every claim is tagged with its source. ",{"type":29,"tag":34,"props":60,"children":61},{},[62],{"type":29,"tag":63,"props":64,"children":65},"span",{},[66],{"type":38,"value":67},"V",{"type":38,"value":69}," means verified on a primary source during this research. ",{"type":29,"tag":34,"props":71,"children":72},{},[73],{"type":29,"tag":63,"props":74,"children":75},{},[76],{"type":38,"value":77},"S",{"type":38,"value":79}," means it rests on secondary sources (law firms, CPA firms, vendors) that agree with each other. ",{"type":29,"tag":34,"props":81,"children":82},{},[83],{"type":29,"tag":63,"props":84,"children":85},{},[86],{"type":38,"value":87},"K",{"type":38,"value":89}," means it comes from stable background knowledge of a published text that I did not re-fetch. ",{"type":29,"tag":34,"props":91,"children":92},{},[93],{"type":29,"tag":63,"props":94,"children":95},{},[96],{"type":38,"value":97},"UNVERIFIED",{"type":38,"value":99}," means I could not confirm it. Strength ratings in (e) are ",{"type":29,"tag":101,"props":102,"children":103},"em",{},[104],{"type":38,"value":34},{"type":38,"value":106}," (Qpoint data can be the main evidence), ",{"type":29,"tag":101,"props":108,"children":109},{},[110],{"type":38,"value":111},"partial",{"type":38,"value":113}," (one input among several, or covers only the AI-usage slice) and ",{"type":29,"tag":101,"props":115,"children":116},{},[117],{"type":38,"value":118},"none",{"type":38,"value":120},".",{"type":29,"tag":30,"props":122,"children":123},{},[124,129],{"type":29,"tag":34,"props":125,"children":126},{},[127],{"type":38,"value":128},"Headline changes since mid-2025",{"type":38,"value":130}," (the points most likely to be out of date in anyone's head):",{"type":29,"tag":132,"props":133,"children":134},"ol",{},[135,167,198,222,232,249,259,269],{"type":29,"tag":136,"props":137,"children":138},"li",{},[139,144,146,151,153,158,160,165],{"type":29,"tag":34,"props":140,"children":141},{},[142],{"type":38,"value":143},"OWASP published a 2026 LLM Top 10 on 3 Aug 2026",{"type":38,"value":145}," and re-ranked it. Excessive Agency moved to #3, and System Prompt Leakage became ",{"type":29,"tag":34,"props":147,"children":148},{},[149],{"type":38,"value":150},"Hidden Context Exposure",{"type":38,"value":152},". The ",{"type":29,"tag":34,"props":154,"children":155},{},[156],{"type":38,"value":157},"Agentic Top 10 (ASI01–ASI10)",{"type":38,"value":159}," came out on 9 Dec 2025. OWASP also launched an ",{"type":29,"tag":34,"props":161,"children":162},{},[163],{"type":38,"value":164},"Agent Control Standard (v0.1, Sep 2026)",{"type":38,"value":166},", which is very close to what Qpoint does.",{"type":29,"tag":136,"props":168,"children":169},{},[170,175,177,182,184,189,191,196],{"type":29,"tag":34,"props":171,"children":172},{},[173],{"type":38,"value":174},"The EU AI Act \"Digital Omnibus on AI\" is law.",{"type":38,"value":176}," It is Regulation (EU) 2026\u002F1744, dated 8 Jul 2026, published in the Official Journal on 24 Jul 2026 and in force since 27 Jul 2026. Annex III high-risk obligations move to ",{"type":29,"tag":34,"props":178,"children":179},{},[180],{"type":38,"value":181},"2 Dec 2027",{"type":38,"value":183}," and Annex I obligations to ",{"type":29,"tag":34,"props":185,"children":186},{},[187],{"type":38,"value":188},"2 Aug 2028",{"type":38,"value":190},". Article 50 transparency was ",{"type":29,"tag":101,"props":192,"children":193},{},[194],{"type":38,"value":195},"not",{"type":38,"value":197}," delayed (2 Aug 2026), though Art. 50(2) marking has a grace period to 2 Dec 2026 for legacy systems. The Art. 4 AI-literacy duty was softened to \"support\".",{"type":29,"tag":136,"props":199,"children":200},{},[201,206,208,213,215,220],{"type":29,"tag":34,"props":202,"children":203},{},[204],{"type":38,"value":205},"CSA AICM is now v1.1",{"type":38,"value":207}," (Jun\u002FJul 2026), with ",{"type":29,"tag":34,"props":209,"children":210},{},[211],{"type":38,"value":212},"247 controls in 18 domains",{"type":38,"value":214}," and a new AIUC-1 mapping. ",{"type":29,"tag":34,"props":216,"children":217},{},[218],{"type":38,"value":219},"STAR for AI Level 2",{"type":38,"value":221}," has been live since Nov 2025, and STAR now carries the AIUC-1 trustmark (Jun 2026).",{"type":29,"tag":136,"props":223,"children":224},{},[225,230],{"type":29,"tag":34,"props":226,"children":227},{},[228],{"type":38,"value":229},"AIUC-1 is on its Q4-2026 release (15 Oct 2026).",{"type":38,"value":231}," It has about 50 active requirements across domains A–F. Schellman (first accredited) and Coalfire are named auditors, and Cursor, Fin, ElevenLabs, Harvey, UiPath, KPMG and Sierra are certified.",{"type":29,"tag":136,"props":233,"children":234},{},[235,240,242,247],{"type":29,"tag":34,"props":236,"children":237},{},[238],{"type":38,"value":239},"NIST:",{"type":38,"value":241}," AI RMF 1.0 is \"being revised\" with no new text yet. The Cyber AI Profile (IR 8596) is still a preliminary draft (Dec 2025). The SP 800-53 AI overlays project ",{"type":29,"tag":34,"props":243,"children":244},{},[245],{"type":38,"value":246},"was renamed on 20 Oct 2026 from COSAiS to \"Control Overlays for Super Intelligence Systems (COSIS)\"",{"type":38,"value":248}," after a 29 Sep 2026 executive order on terminology. No overlay has a public draft yet.",{"type":29,"tag":136,"props":250,"children":251},{},[252,257],{"type":29,"tag":34,"props":253,"children":254},{},[255],{"type":38,"value":256},"HITRUST CSF v11.9.0 (24 Sep 2026)",{"type":38,"value":258}," added an OWASP Agentic Top 10 mapping and an \"Agentic AI\" factor to the AI Security Certification.",{"type":29,"tag":136,"props":260,"children":261},{},[262,267],{"type":29,"tag":34,"props":263,"children":264},{},[265],{"type":38,"value":266},"AICPA has issued no AI-specific SOC 2 criteria or points of focus.",{"type":38,"value":268}," The 2017 TSC with the 2022 points of focus is still the operative text.",{"type":29,"tag":136,"props":270,"children":271},{},[272,277],{"type":29,"tag":34,"props":273,"children":274},{},[275],{"type":38,"value":276},"EU CRA reporting obligations went live on 11 Sep 2026",{"type":38,"value":278},", through ENISA's Single Reporting Platform. Full application is 11 Dec 2027.",{"type":29,"tag":280,"props":281,"children":282},"hr",{},[],{"type":29,"tag":284,"props":285,"children":287},"h2",{"id":286},"_1-owasp-top-10-for-llm-applications-2026-and-owasp-top-10-for-agentic-applications-2026",[288],{"type":38,"value":13},{"type":29,"tag":290,"props":291,"children":293},"h3",{"id":292},"a-identity-and-status",[294],{"type":38,"value":295},"(a) Identity and status",{"type":29,"tag":297,"props":298,"children":299},"ul",{},[300,310,345,373,390],{"type":29,"tag":136,"props":301,"children":302},{},[303,308],{"type":29,"tag":34,"props":304,"children":305},{},[306],{"type":38,"value":307},"Issuer:",{"type":38,"value":309}," OWASP GenAI Security Project (the former OWASP LLM Top 10 project).",{"type":29,"tag":136,"props":311,"children":312},{},[313,318,320,325,327,332,334,339,341],{"type":29,"tag":34,"props":314,"children":315},{},[316],{"type":38,"value":317},"LLM Top 10:",{"type":38,"value":319}," the current edition is ",{"type":29,"tag":34,"props":321,"children":322},{},[323],{"type":38,"value":324},"\"OWASP Top 10 for LLM Applications 2026\"",{"type":38,"value":326},", released ",{"type":29,"tag":34,"props":328,"children":329},{},[330],{"type":38,"value":331},"3 Aug 2026",{"type":38,"value":333}," and formally unveiled 1–2 Sep 2026 alongside the Agent Control Standard. ",{"type":29,"tag":63,"props":335,"children":336},{},[337],{"type":38,"value":338},"V: resource page dated 3 Aug 2026; list S",{"type":38,"value":340}," The 2025 edition (Nov 2024) is still the one shown on the genai.owasp.org\u002Fllm-top-10\u002F landing page, so expect customers and auditors to cite either. ",{"type":29,"tag":63,"props":342,"children":343},{},[344],{"type":38,"value":67},{"type":29,"tag":136,"props":346,"children":347},{},[348,353,355,360,361,366,368],{"type":29,"tag":34,"props":349,"children":350},{},[351],{"type":38,"value":352},"Agentic Top 10:",{"type":38,"value":354}," ",{"type":29,"tag":34,"props":356,"children":357},{},[358],{"type":38,"value":359},"\"OWASP Top 10 for Agentic Applications for 2026\"",{"type":38,"value":326},{"type":29,"tag":34,"props":362,"children":363},{},[364],{"type":38,"value":365},"9 Dec 2025",{"type":38,"value":367}," under the Agentic Security Initiative. ",{"type":29,"tag":63,"props":369,"children":370},{},[371],{"type":38,"value":372},"V date; list S",{"type":29,"tag":136,"props":374,"children":375},{},[376,381,383,388],{"type":29,"tag":34,"props":377,"children":378},{},[379],{"type":38,"value":380},"Kind of thing:",{"type":38,"value":382}," a ",{"type":29,"tag":34,"props":384,"children":385},{},[386],{"type":38,"value":387},"risk taxonomy",{"type":38,"value":389}," with community consensus and incident-weighted ranking. It is not a control framework and has nothing to certify against.",{"type":29,"tag":136,"props":391,"children":392},{},[393,398,400,405,407,412,413],{"type":29,"tag":34,"props":394,"children":395},{},[396],{"type":38,"value":397},"Also new: the OWASP Agent Control Standard (ACS) v0.1",{"type":38,"value":399}," (donated in Sep 2026). It defines \"guardian agent\" enforcement points, an observability layer that traces agent events over OpenTelemetry and OCSF, and an ",{"type":29,"tag":34,"props":401,"children":402},{},[403],{"type":38,"value":404},"Agent Bill of Materials (AgBOM)",{"type":38,"value":406}," in CycloneDX, SPDX or SWID. Later versions are planned to add deny and modify enforcement across MCP and A2A. ",{"type":29,"tag":63,"props":408,"children":409},{},[410],{"type":38,"value":411},"S: CSA research note; repo github.com\u002FGenAI-Security-Project\u002Fagent-control-standard",{"type":38,"value":354},{"type":29,"tag":34,"props":414,"children":415},{},[416],{"type":38,"value":417},"This is the OWASP artifact closest to Qpoint's product shape and worth tracking directly.",{"type":29,"tag":290,"props":419,"children":421},{"id":420},"b-native-structure",[422],{"type":38,"value":423},"(b) Native structure",{"type":29,"tag":30,"props":425,"children":426},{},[427,432,434,438],{"type":29,"tag":34,"props":428,"children":429},{},[430],{"type":38,"value":431},"LLM Top 10, 2026",{"type":38,"value":433}," (with each entry's 2025 position). The order agrees across the CSA research note and Imperva. I could not open the OWASP PDF, so the order is ",{"type":29,"tag":63,"props":435,"children":436},{},[437],{"type":38,"value":77},{"type":38,"value":120},{"type":29,"tag":440,"props":441,"children":442},"table",{},[443,467],{"type":29,"tag":444,"props":445,"children":446},"thead",{},[447],{"type":29,"tag":448,"props":449,"children":450},"tr",{},[451,457,462],{"type":29,"tag":452,"props":453,"children":454},"th",{},[455],{"type":38,"value":456},"2026",{"type":29,"tag":452,"props":458,"children":459},{},[460],{"type":38,"value":461},"Title",{"type":29,"tag":452,"props":463,"children":464},{},[465],{"type":38,"value":466},"2025",{"type":29,"tag":468,"props":469,"children":470},"tbody",{},[471,489,506,524,541,558,575,593,610,626],{"type":29,"tag":448,"props":472,"children":473},{},[474,480,485],{"type":29,"tag":475,"props":476,"children":477},"td",{},[478],{"type":38,"value":479},"LLM01",{"type":29,"tag":475,"props":481,"children":482},{},[483],{"type":38,"value":484},"Prompt Injection",{"type":29,"tag":475,"props":486,"children":487},{},[488],{"type":38,"value":479},{"type":29,"tag":448,"props":490,"children":491},{},[492,497,502],{"type":29,"tag":475,"props":493,"children":494},{},[495],{"type":38,"value":496},"LLM02",{"type":29,"tag":475,"props":498,"children":499},{},[500],{"type":38,"value":501},"Sensitive Information Disclosure",{"type":29,"tag":475,"props":503,"children":504},{},[505],{"type":38,"value":496},{"type":29,"tag":448,"props":507,"children":508},{},[509,514,519],{"type":29,"tag":475,"props":510,"children":511},{},[512],{"type":38,"value":513},"LLM03",{"type":29,"tag":475,"props":515,"children":516},{},[517],{"type":38,"value":518},"Excessive Agency",{"type":29,"tag":475,"props":520,"children":521},{},[522],{"type":38,"value":523},"LLM06",{"type":29,"tag":448,"props":525,"children":526},{},[527,532,537],{"type":29,"tag":475,"props":528,"children":529},{},[530],{"type":38,"value":531},"LLM04",{"type":29,"tag":475,"props":533,"children":534},{},[535],{"type":38,"value":536},"Supply Chain",{"type":29,"tag":475,"props":538,"children":539},{},[540],{"type":38,"value":513},{"type":29,"tag":448,"props":542,"children":543},{},[544,549,554],{"type":29,"tag":475,"props":545,"children":546},{},[547],{"type":38,"value":548},"LLM05",{"type":29,"tag":475,"props":550,"children":551},{},[552],{"type":38,"value":553},"Data and Model Poisoning",{"type":29,"tag":475,"props":555,"children":556},{},[557],{"type":38,"value":531},{"type":29,"tag":448,"props":559,"children":560},{},[561,565,570],{"type":29,"tag":475,"props":562,"children":563},{},[564],{"type":38,"value":523},{"type":29,"tag":475,"props":566,"children":567},{},[568],{"type":38,"value":569},"Unbounded Consumption",{"type":29,"tag":475,"props":571,"children":572},{},[573],{"type":38,"value":574},"LLM10",{"type":29,"tag":448,"props":576,"children":577},{},[578,583,588],{"type":29,"tag":475,"props":579,"children":580},{},[581],{"type":38,"value":582},"LLM07",{"type":29,"tag":475,"props":584,"children":585},{},[586],{"type":38,"value":587},"Misinformation",{"type":29,"tag":475,"props":589,"children":590},{},[591],{"type":38,"value":592},"LLM09",{"type":29,"tag":448,"props":594,"children":595},{},[596,601,606],{"type":29,"tag":475,"props":597,"children":598},{},[599],{"type":38,"value":600},"LLM08",{"type":29,"tag":475,"props":602,"children":603},{},[604],{"type":38,"value":605},"Hidden Context Exposure (formerly System Prompt Leakage; now covers retrieved docs, agent memory, tool responses, app state)",{"type":29,"tag":475,"props":607,"children":608},{},[609],{"type":38,"value":582},{"type":29,"tag":448,"props":611,"children":612},{},[613,617,622],{"type":29,"tag":475,"props":614,"children":615},{},[616],{"type":38,"value":592},{"type":29,"tag":475,"props":618,"children":619},{},[620],{"type":38,"value":621},"Vector and Embedding Weaknesses",{"type":29,"tag":475,"props":623,"children":624},{},[625],{"type":38,"value":600},{"type":29,"tag":448,"props":627,"children":628},{},[629,633,638],{"type":29,"tag":475,"props":630,"children":631},{},[632],{"type":38,"value":574},{"type":29,"tag":475,"props":634,"children":635},{},[636],{"type":38,"value":637},"Improper Output Handling",{"type":29,"tag":475,"props":639,"children":640},{},[641],{"type":38,"value":548},{"type":29,"tag":30,"props":643,"children":644},{},[645,647,652,654,658],{"type":38,"value":646},"The ",{"type":29,"tag":34,"props":648,"children":649},{},[650],{"type":38,"value":651},"2025 list",{"type":38,"value":653},", for reference ",{"type":29,"tag":63,"props":655,"children":656},{},[657],{"type":38,"value":67},{"type":38,"value":659},": LLM01 Prompt Injection, LLM02 Sensitive Information Disclosure, LLM03 Supply Chain, LLM04 Data and Model Poisoning, LLM05 Improper Output Handling, LLM06 Excessive Agency, LLM07 System Prompt Leakage, LLM08 Vector and Embedding Weaknesses, LLM09 Misinformation, LLM10 Unbounded Consumption.",{"type":29,"tag":30,"props":661,"children":662},{},[663,668,669,674],{"type":29,"tag":34,"props":664,"children":665},{},[666],{"type":38,"value":667},"Agentic Top 10, 2026",{"type":38,"value":354},{"type":29,"tag":63,"props":670,"children":671},{},[672],{"type":38,"value":673},"S: consistent across many secondary sources; the OWASP page itself only names \"Agent Behavior Hijacking\", \"Tool Misuse and Exploitation\" and \"Identity and Privilege Abuse\" as highlights",{"type":38,"value":675},":",{"type":29,"tag":440,"props":677,"children":678},{},[679,694],{"type":29,"tag":444,"props":680,"children":681},{},[682],{"type":29,"tag":448,"props":683,"children":684},{},[685,690],{"type":29,"tag":452,"props":686,"children":687},{},[688],{"type":38,"value":689},"ID",{"type":29,"tag":452,"props":691,"children":692},{},[693],{"type":38,"value":461},{"type":29,"tag":468,"props":695,"children":696},{},[697,710,723,736,749,762,775,788,801,814],{"type":29,"tag":448,"props":698,"children":699},{},[700,705],{"type":29,"tag":475,"props":701,"children":702},{},[703],{"type":38,"value":704},"ASI01",{"type":29,"tag":475,"props":706,"children":707},{},[708],{"type":38,"value":709},"Agent Goal Hijack",{"type":29,"tag":448,"props":711,"children":712},{},[713,718],{"type":29,"tag":475,"props":714,"children":715},{},[716],{"type":38,"value":717},"ASI02",{"type":29,"tag":475,"props":719,"children":720},{},[721],{"type":38,"value":722},"Tool Misuse & Exploitation",{"type":29,"tag":448,"props":724,"children":725},{},[726,731],{"type":29,"tag":475,"props":727,"children":728},{},[729],{"type":38,"value":730},"ASI03",{"type":29,"tag":475,"props":732,"children":733},{},[734],{"type":38,"value":735},"Identity & Privilege Abuse",{"type":29,"tag":448,"props":737,"children":738},{},[739,744],{"type":29,"tag":475,"props":740,"children":741},{},[742],{"type":38,"value":743},"ASI04",{"type":29,"tag":475,"props":745,"children":746},{},[747],{"type":38,"value":748},"Agentic Supply Chain Vulnerabilities",{"type":29,"tag":448,"props":750,"children":751},{},[752,757],{"type":29,"tag":475,"props":753,"children":754},{},[755],{"type":38,"value":756},"ASI05",{"type":29,"tag":475,"props":758,"children":759},{},[760],{"type":38,"value":761},"Unexpected Code Execution (RCE)",{"type":29,"tag":448,"props":763,"children":764},{},[765,770],{"type":29,"tag":475,"props":766,"children":767},{},[768],{"type":38,"value":769},"ASI06",{"type":29,"tag":475,"props":771,"children":772},{},[773],{"type":38,"value":774},"Memory & Context Poisoning",{"type":29,"tag":448,"props":776,"children":777},{},[778,783],{"type":29,"tag":475,"props":779,"children":780},{},[781],{"type":38,"value":782},"ASI07",{"type":29,"tag":475,"props":784,"children":785},{},[786],{"type":38,"value":787},"Insecure Inter-Agent Communication",{"type":29,"tag":448,"props":789,"children":790},{},[791,796],{"type":29,"tag":475,"props":792,"children":793},{},[794],{"type":38,"value":795},"ASI08",{"type":29,"tag":475,"props":797,"children":798},{},[799],{"type":38,"value":800},"Cascading Failures",{"type":29,"tag":448,"props":802,"children":803},{},[804,809],{"type":29,"tag":475,"props":805,"children":806},{},[807],{"type":38,"value":808},"ASI09",{"type":29,"tag":475,"props":810,"children":811},{},[812],{"type":38,"value":813},"Human-Agent Trust Exploitation",{"type":29,"tag":448,"props":815,"children":816},{},[817,822],{"type":29,"tag":475,"props":818,"children":819},{},[820],{"type":38,"value":821},"ASI10",{"type":29,"tag":475,"props":823,"children":824},{},[825],{"type":38,"value":826},"Rogue Agents",{"type":29,"tag":30,"props":828,"children":829},{},[830,832,836],{"type":38,"value":831},"Watch for old numbering. An early-2025 draft of the agentic threat list put Memory Poisoning at #1, and it is still cited. ",{"type":29,"tag":63,"props":833,"children":834},{},[835],{"type":38,"value":77},{"type":38,"value":837}," The unit of requirement is one risk entry, each with a description, example attack scenarios, prevention and mitigation strategies, and references.",{"type":29,"tag":290,"props":839,"children":841},{"id":840},"c-who-asks-and-why",[842],{"type":38,"value":843},"(c) Who asks and why",{"type":29,"tag":297,"props":845,"children":846},{},[847,852,857,862,867],{"type":29,"tag":136,"props":848,"children":849},{},[850],{"type":38,"value":851},"AppSec and product-security teams use it as threat-model scaffolding.",{"type":29,"tag":136,"props":853,"children":854},{},[855],{"type":38,"value":856},"Pen-test and red-team firms use it as a test-case catalogue.",{"type":29,"tag":136,"props":858,"children":859},{},[860],{"type":38,"value":861},"Buyer security questionnaires ask \"how do you address the OWASP LLM Top 10?\"",{"type":29,"tag":136,"props":863,"children":864},{},[865],{"type":38,"value":866},"Other frameworks reference it: AIUC-1 crosswalks to both lists, HITRUST v11.9 maps the agentic list, and CSA AICM cites OWASP.",{"type":29,"tag":136,"props":868,"children":869},{},[870],{"type":38,"value":871},"It is not demanded by regulators or auditors directly. It is the shared vocabulary that the other frameworks borrow.",{"type":29,"tag":290,"props":873,"children":875},{"id":874},"d-how-evidence-works",[876],{"type":38,"value":877},"(d) How evidence works",{"type":29,"tag":297,"props":879,"children":880},{},[881,886],{"type":29,"tag":136,"props":882,"children":883},{},[884],{"type":38,"value":885},"There is no attestation and no certification. Evidence is a mapping of each risk to controls plus test results (red-team reports, scans) and runtime telemetry.",{"type":29,"tag":136,"props":887,"children":888},{},[889],{"type":38,"value":890},"A buyer typically wants a per-item table (\"risk → our control → proof\").",{"type":29,"tag":290,"props":892,"children":894},{"id":893},"e-what-qpoint-can-evidence",[895],{"type":38,"value":896},"(e) What Qpoint can evidence",{"type":29,"tag":440,"props":898,"children":899},{},[900,921],{"type":29,"tag":444,"props":901,"children":902},{},[903],{"type":29,"tag":448,"props":904,"children":905},{},[906,911,916],{"type":29,"tag":452,"props":907,"children":908},{},[909],{"type":38,"value":910},"Item",{"type":29,"tag":452,"props":912,"children":913},{},[914],{"type":38,"value":915},"Strength",{"type":29,"tag":452,"props":917,"children":918},{},[919],{"type":38,"value":920},"How",{"type":29,"tag":468,"props":922,"children":923},{},[924,945,966,986,1007,1027,1048,1069,1090,1110,1130,1150,1172,1192,1212,1232],{"type":29,"tag":448,"props":925,"children":926},{},[927,932,940],{"type":29,"tag":475,"props":928,"children":929},{},[930],{"type":38,"value":931},"LLM02 Sensitive Information Disclosure",{"type":29,"tag":475,"props":933,"children":934},{},[935],{"type":29,"tag":34,"props":936,"children":937},{},[938],{"type":38,"value":939},"Strong",{"type":29,"tag":475,"props":941,"children":942},{},[943],{"type":38,"value":944},"Records of which data classes go to which provider. Inline redaction of PII and secrets at egress. Block events.",{"type":29,"tag":448,"props":946,"children":947},{},[948,953,961],{"type":29,"tag":475,"props":949,"children":950},{},[951],{"type":38,"value":952},"LLM03 Excessive Agency",{"type":29,"tag":475,"props":954,"children":955},{},[956],{"type":29,"tag":34,"props":957,"children":958},{},[959],{"type":38,"value":960},"Partial→strong",{"type":29,"tag":475,"props":962,"children":963},{},[964],{"type":38,"value":965},"Inventory of agent tools and MCP servers in use. MCP gating and allow-listing. Shows which agents can reach which tools and endpoints. Cannot see in-model permission logic.",{"type":29,"tag":448,"props":967,"children":968},{},[969,974,981],{"type":29,"tag":475,"props":970,"children":971},{},[972],{"type":38,"value":973},"LLM04 Supply Chain",{"type":29,"tag":475,"props":975,"children":976},{},[977],{"type":29,"tag":34,"props":978,"children":979},{},[980],{"type":38,"value":960},{"type":29,"tag":475,"props":982,"children":983},{},[984],{"type":38,"value":985},"Live inventory of providers, models, model versions, harnesses and MCP servers actually in use. Detects unapproved or shadow models. Does not verify model provenance or weights.",{"type":29,"tag":448,"props":987,"children":988},{},[989,994,1002],{"type":29,"tag":475,"props":990,"children":991},{},[992],{"type":38,"value":993},"LLM06 Unbounded Consumption",{"type":29,"tag":475,"props":995,"children":996},{},[997],{"type":29,"tag":34,"props":998,"children":999},{},[1000],{"type":38,"value":1001},"Partial",{"type":29,"tag":475,"props":1003,"children":1004},{},[1005],{"type":38,"value":1006},"Request and token volume per user, agent and provider. Anomaly alerts. Rate limiting or blocking if enforcement supports it.",{"type":29,"tag":448,"props":1008,"children":1009},{},[1010,1015,1022],{"type":29,"tag":475,"props":1011,"children":1012},{},[1013],{"type":38,"value":1014},"LLM08 Hidden Context Exposure",{"type":29,"tag":475,"props":1016,"children":1017},{},[1018],{"type":29,"tag":34,"props":1019,"children":1020},{},[1021],{"type":38,"value":1001},{"type":29,"tag":475,"props":1023,"children":1024},{},[1025],{"type":38,"value":1026},"Can see secrets or credentials embedded in outbound system prompts or context and redact them. Cannot see what the model leaks back unless responses are inspected.",{"type":29,"tag":448,"props":1028,"children":1029},{},[1030,1035,1043],{"type":29,"tag":475,"props":1031,"children":1032},{},[1033],{"type":38,"value":1034},"LLM01 Prompt Injection",{"type":29,"tag":475,"props":1036,"children":1037},{},[1038],{"type":29,"tag":34,"props":1039,"children":1040},{},[1041],{"type":38,"value":1042},"Partial (detect only)",{"type":29,"tag":475,"props":1044,"children":1045},{},[1046],{"type":38,"value":1047},"Can inspect inbound content and tool outputs flowing to agents, and flag known injection patterns. Cannot prevent model-side compliance.",{"type":29,"tag":448,"props":1049,"children":1050},{},[1051,1056,1064],{"type":29,"tag":475,"props":1052,"children":1053},{},[1054],{"type":38,"value":1055},"LLM09 Vector and Embedding Weaknesses",{"type":29,"tag":475,"props":1057,"children":1058},{},[1059],{"type":29,"tag":34,"props":1060,"children":1061},{},[1062],{"type":38,"value":1063},"Weak",{"type":29,"tag":475,"props":1065,"children":1066},{},[1067],{"type":38,"value":1068},"Sees embedding API calls and vector-DB connections (inventory), not access-control correctness.",{"type":29,"tag":448,"props":1070,"children":1071},{},[1072,1077,1085],{"type":29,"tag":475,"props":1073,"children":1074},{},[1075],{"type":38,"value":1076},"LLM05 Poisoning, LLM07 Misinformation, LLM10 Improper Output Handling",{"type":29,"tag":475,"props":1078,"children":1079},{},[1080],{"type":29,"tag":34,"props":1081,"children":1082},{},[1083],{"type":38,"value":1084},"None \u002F weak",{"type":29,"tag":475,"props":1086,"children":1087},{},[1088],{"type":38,"value":1089},"Training data, model behaviour and downstream app output handling are outside network observation.",{"type":29,"tag":448,"props":1091,"children":1092},{},[1093,1098,1105],{"type":29,"tag":475,"props":1094,"children":1095},{},[1096],{"type":38,"value":1097},"ASI04 Agentic Supply Chain",{"type":29,"tag":475,"props":1099,"children":1100},{},[1101],{"type":29,"tag":34,"props":1102,"children":1103},{},[1104],{"type":38,"value":939},{"type":29,"tag":475,"props":1106,"children":1107},{},[1108],{"type":38,"value":1109},"MCP server and tool inventory, allow-listing, first-seen alerts.",{"type":29,"tag":448,"props":1111,"children":1112},{},[1113,1118,1125],{"type":29,"tag":475,"props":1114,"children":1115},{},[1116],{"type":38,"value":1117},"ASI02 Tool Misuse & Exploitation",{"type":29,"tag":475,"props":1119,"children":1120},{},[1121],{"type":29,"tag":34,"props":1122,"children":1123},{},[1124],{"type":38,"value":960},{"type":29,"tag":475,"props":1126,"children":1127},{},[1128],{"type":38,"value":1129},"Observes tool and MCP calls on the wire. Gates or denies specific servers or methods.",{"type":29,"tag":448,"props":1131,"children":1132},{},[1133,1138,1145],{"type":29,"tag":475,"props":1134,"children":1135},{},[1136],{"type":38,"value":1137},"ASI03 Identity & Privilege Abuse",{"type":29,"tag":475,"props":1139,"children":1140},{},[1141],{"type":29,"tag":34,"props":1142,"children":1143},{},[1144],{"type":38,"value":1001},{"type":29,"tag":475,"props":1146,"children":1147},{},[1148],{"type":38,"value":1149},"Attributes agent traffic to user, process and endpoint. Detects agents using unexpected credentials or destinations.",{"type":29,"tag":448,"props":1151,"children":1152},{},[1153,1158,1167],{"type":29,"tag":475,"props":1154,"children":1155},{},[1156],{"type":38,"value":1157},"ASI05 Unexpected Code Execution",{"type":29,"tag":475,"props":1159,"children":1160},{},[1161,1165],{"type":29,"tag":34,"props":1162,"children":1163},{},[1164],{"type":38,"value":1001},{"type":38,"value":1166}," (depends on eBPF process-lineage capture)",{"type":29,"tag":475,"props":1168,"children":1169},{},[1170],{"type":38,"value":1171},"Process exec and network events spawned by a harness.",{"type":29,"tag":448,"props":1173,"children":1174},{},[1175,1180,1187],{"type":29,"tag":475,"props":1176,"children":1177},{},[1178],{"type":38,"value":1179},"ASI07 Insecure Inter-Agent Communication",{"type":29,"tag":475,"props":1181,"children":1182},{},[1183],{"type":29,"tag":34,"props":1184,"children":1185},{},[1186],{"type":38,"value":1001},{"type":29,"tag":475,"props":1188,"children":1189},{},[1190],{"type":38,"value":1191},"Sees A2A and MCP transports, TLS use and endpoints.",{"type":29,"tag":448,"props":1193,"children":1194},{},[1195,1200,1207],{"type":29,"tag":475,"props":1196,"children":1197},{},[1198],{"type":38,"value":1199},"ASI10 Rogue Agents",{"type":29,"tag":475,"props":1201,"children":1202},{},[1203],{"type":29,"tag":34,"props":1204,"children":1205},{},[1206],{"type":38,"value":1001},{"type":29,"tag":475,"props":1208,"children":1209},{},[1210],{"type":38,"value":1211},"Behavioural baselines per agent, plus a kill switch through block policy.",{"type":29,"tag":448,"props":1213,"children":1214},{},[1215,1220,1227],{"type":29,"tag":475,"props":1216,"children":1217},{},[1218],{"type":38,"value":1219},"ASI01 Goal Hijack, ASI06 Memory Poisoning, ASI08 Cascading Failures",{"type":29,"tag":475,"props":1221,"children":1222},{},[1223],{"type":29,"tag":34,"props":1224,"children":1225},{},[1226],{"type":38,"value":1063},{"type":29,"tag":475,"props":1228,"children":1229},{},[1230],{"type":38,"value":1231},"Indirect signals only (anomalous destinations or volumes).",{"type":29,"tag":448,"props":1233,"children":1234},{},[1235,1240,1248],{"type":29,"tag":475,"props":1236,"children":1237},{},[1238],{"type":38,"value":1239},"ASI09 Human-Agent Trust Exploitation",{"type":29,"tag":475,"props":1241,"children":1242},{},[1243],{"type":29,"tag":34,"props":1244,"children":1245},{},[1246],{"type":38,"value":1247},"None",{"type":29,"tag":475,"props":1249,"children":1250},{},[1251],{"type":38,"value":1252},"Human-factors and UX risk.",{"type":29,"tag":30,"props":1254,"children":1255},{},[1256,1261],{"type":29,"tag":34,"props":1257,"children":1258},{},[1259],{"type":38,"value":1260},"Never covered:",{"type":38,"value":1262}," model training, model internals, UI\u002FUX trust design, and downstream application code.",{"type":29,"tag":290,"props":1264,"children":1266},{"id":1265},"f-crosswalks",[1267],{"type":38,"value":1268},"(f) Crosswalks",{"type":29,"tag":297,"props":1270,"children":1271},{},[1272,1282,1299,1315,1331],{"type":29,"tag":136,"props":1273,"children":1274},{},[1275,1277],{"type":38,"value":1276},"The 2026 LLM Top 10 \"maps risks to NIST, MITRE ATLAS, CWE, and the OWASP Top 10 for Agentic Applications\". ",{"type":29,"tag":63,"props":1278,"children":1279},{},[1280],{"type":38,"value":1281},"V, resource page",{"type":29,"tag":136,"props":1283,"children":1284},{},[1285,1287,1292,1294],{"type":38,"value":1286},"OWASP published a ",{"type":29,"tag":34,"props":1288,"children":1289},{},[1290],{"type":38,"value":1291},"GenAI Security Industry Framework Crosswalk",{"type":38,"value":1293}," (1 Sep 2026). ",{"type":29,"tag":63,"props":1295,"children":1296},{},[1297],{"type":38,"value":1298},"V, listed; contents not inspected",{"type":29,"tag":136,"props":1300,"children":1301},{},[1302,1304,1308,1310,1314],{"type":38,"value":1303},"Third-party crosswalks: AIUC-1 maps to both lists at threat level ",{"type":29,"tag":63,"props":1305,"children":1306},{},[1307],{"type":38,"value":67},{"type":38,"value":1309},"; HITRUST CSF v11.9 maps the Agentic Top 10 ",{"type":29,"tag":63,"props":1311,"children":1312},{},[1313],{"type":38,"value":67},{"type":38,"value":120},{"type":29,"tag":136,"props":1316,"children":1317},{},[1318,1323,1325,1330],{"type":29,"tag":34,"props":1319,"children":1320},{},[1321],{"type":38,"value":1322},"OWASP↔MITRE ATLAS:",{"type":38,"value":1324}," there is no standalone official MITRE crosswalk. The mapping lives inside the OWASP 2026 document ",{"type":29,"tag":63,"props":1326,"children":1327},{},[1328],{"type":38,"value":1329},"V claim; S detail",{"type":38,"value":120},{"type":29,"tag":136,"props":1332,"children":1333},{},[1334,1336],{"type":38,"value":1335},"ATLAS has been updated for agents (context and memory poisoning, agent config tampering, tool-based exfiltration, early 2026). Current counts conflict across sources (around 16 tactics, 84–114 techniques). ",{"type":29,"tag":34,"props":1337,"children":1338},{},[1339],{"type":29,"tag":63,"props":1340,"children":1341},{},[1342],{"type":38,"value":1343},"UNVERIFIED counts",{"type":29,"tag":30,"props":1345,"children":1346},{},[1347,1352,1353,1361,1363,1369,1370,1376,1377,1383,1384,1390,1391,1397,1398,1404,1405,1411,1412],{"type":29,"tag":34,"props":1348,"children":1349},{},[1350],{"type":38,"value":1351},"Sources:",{"type":38,"value":354},{"type":29,"tag":1354,"props":1355,"children":1359},"a",{"href":1356,"rel":1357},"https:\u002F\u002Fgenai.owasp.org\u002Fllm-top-10\u002F",[1358],"nofollow",[1360],{"type":38,"value":1356},{"type":38,"value":1362}," · ",{"type":29,"tag":1354,"props":1364,"children":1367},{"href":1365,"rel":1366},"https:\u002F\u002Fgenai.owasp.org\u002Fresource\u002Fowasp-genai-llm-top-10-2026\u002F",[1358],[1368],{"type":38,"value":1365},{"type":38,"value":1362},{"type":29,"tag":1354,"props":1371,"children":1374},{"href":1372,"rel":1373},"https:\u002F\u002Fgenai.owasp.org\u002F2026\u002F09\u002F01\u002Fowasp-genai-security-project-unveils-2026-top-10-for-llm-applications-new-agent-control-standard-and-sponsors-as-community-tops-30000-members\u002F",[1358],[1375],{"type":38,"value":1372},{"type":38,"value":1362},{"type":29,"tag":1354,"props":1378,"children":1381},{"href":1379,"rel":1380},"https:\u002F\u002Fgenai.owasp.org\u002Fresource\u002Fowasp-top-10-for-agentic-applications-for-2026\u002F",[1358],[1382],{"type":38,"value":1379},{"type":38,"value":1362},{"type":29,"tag":1354,"props":1385,"children":1388},{"href":1386,"rel":1387},"https:\u002F\u002Fgenai.owasp.org\u002F2025\u002F12\u002F09\u002Fowasp-genai-security-project-releases-top-10-risks-and-mitigations-for-agentic-ai-security\u002F",[1358],[1389],{"type":38,"value":1386},{"type":38,"value":1362},{"type":29,"tag":1354,"props":1392,"children":1395},{"href":1393,"rel":1394},"https:\u002F\u002Flabs.cloudsecurityalliance.org\u002Fresearch\u002Fcsa-research-note-owasp-genai-top10-2026-agent-control-stand\u002F",[1358],[1396],{"type":38,"value":1393},{"type":38,"value":1362},{"type":29,"tag":1354,"props":1399,"children":1402},{"href":1400,"rel":1401},"https:\u002F\u002Fwww.imperva.com\u002Fblog\u002Fowasp-llm-top-10-2026-what-changed\u002F",[1358],[1403],{"type":38,"value":1400},{"type":38,"value":1362},{"type":29,"tag":1354,"props":1406,"children":1409},{"href":1407,"rel":1408},"https:\u002F\u002Fcycode.com\u002Fblog\u002Fowasp-top-10-agentic-applications\u002F",[1358],[1410],{"type":38,"value":1407},{"type":38,"value":1362},{"type":29,"tag":1354,"props":1413,"children":1416},{"href":1414,"rel":1415},"https:\u002F\u002Fdocs.modulos.ai\u002Fframeworks\u002Fowasp-top-10-agentic",[1358],[1417],{"type":38,"value":1414},{"type":29,"tag":280,"props":1419,"children":1420},{},[],{"type":29,"tag":284,"props":1422,"children":1424},{"id":1423},"_2-nist-ai-risk-management-framework-ai-rmf-10-nist-ai-100-1-the-generative-ai-profile-nist-ai-600-1-and-the-nist-ai-cybersecurity-work",[1425],{"type":38,"value":14},{"type":29,"tag":290,"props":1427,"children":1429},{"id":1428},"a-identity-and-status-1",[1430],{"type":38,"value":295},{"type":29,"tag":297,"props":1432,"children":1433},{},[1434,1455,1471,1486,1501,1550],{"type":29,"tag":136,"props":1435,"children":1436},{},[1437,1442,1444,1449,1451],{"type":29,"tag":34,"props":1438,"children":1439},{},[1440],{"type":38,"value":1441},"AI RMF 1.0",{"type":38,"value":1443}," was published on 26 Jan 2023. It is voluntary and final. NIST's page now says: ",{"type":29,"tag":34,"props":1445,"children":1446},{},[1447],{"type":38,"value":1448},"\"The AI RMF 1.0 is being revised as part of the White House AI Action Plan.\"",{"type":38,"value":1450}," No revised draft has been published. ",{"type":29,"tag":63,"props":1452,"children":1453},{},[1454],{"type":38,"value":67},{"type":29,"tag":136,"props":1456,"children":1457},{},[1458,1460,1465,1467],{"type":38,"value":1459},"A concept note for an ",{"type":29,"tag":34,"props":1461,"children":1462},{},[1463],{"type":38,"value":1464},"AI RMF Profile on Trustworthy AI in Critical Infrastructure",{"type":38,"value":1466}," was released on 7 Apr 2026. ",{"type":29,"tag":63,"props":1468,"children":1469},{},[1470],{"type":38,"value":67},{"type":29,"tag":136,"props":1472,"children":1473},{},[1474,1479,1481],{"type":29,"tag":34,"props":1475,"children":1476},{},[1477],{"type":38,"value":1478},"NIST AI 600-1, Generative AI Profile:",{"type":38,"value":1480}," final, 26 Jul 2024. No revision was found. ",{"type":29,"tag":63,"props":1482,"children":1483},{},[1484],{"type":38,"value":1485},"V date; S no-revision",{"type":29,"tag":136,"props":1487,"children":1488},{},[1489,1493,1494,1499],{"type":29,"tag":34,"props":1490,"children":1491},{},[1492],{"type":38,"value":380},{"type":38,"value":382},{"type":29,"tag":34,"props":1495,"children":1496},{},[1497],{"type":38,"value":1498},"risk-management framework",{"type":38,"value":1500},", voluntary and outcome-based. It cannot be certified against.",{"type":29,"tag":136,"props":1502,"children":1503},{},[1504,1509,1511,1516,1518,1523,1525,1530,1532,1537,1539,1544,1546],{"type":29,"tag":34,"props":1505,"children":1506},{},[1507],{"type":38,"value":1508},"Cyber AI Profile, NIST IR 8596:",{"type":38,"value":1510}," a CSF 2.0 Community Profile. The ",{"type":29,"tag":34,"props":1512,"children":1513},{},[1514],{"type":38,"value":1515},"initial preliminary draft is dated 16 Dec 2025",{"type":38,"value":1517},", and comments closed 30 Jan 2026. It has three focus areas: ",{"type":29,"tag":34,"props":1519,"children":1520},{},[1521],{"type":38,"value":1522},"Secure",{"type":38,"value":1524}," (securing AI system components), ",{"type":29,"tag":34,"props":1526,"children":1527},{},[1528],{"type":38,"value":1529},"Defend",{"type":38,"value":1531}," (AI-enabled cyber defence) and ",{"type":29,"tag":34,"props":1533,"children":1534},{},[1535],{"type":38,"value":1536},"Thwart",{"type":38,"value":1538}," (thwarting AI-enabled attacks). Working sessions ran Apr–May 2026, and ",{"type":29,"tag":34,"props":1540,"children":1541},{},[1542],{"type":38,"value":1543},"no initial public draft or final had been published as of this check",{"type":38,"value":1545},". ",{"type":29,"tag":63,"props":1547,"children":1548},{},[1549],{"type":38,"value":67},{"type":29,"tag":136,"props":1551,"children":1552},{},[1553,1558,1560,1565,1566,1571,1573,1578,1580,1585],{"type":29,"tag":34,"props":1554,"children":1555},{},[1556],{"type":38,"value":1557},"SP 800-53 control overlays for AI.",{"type":38,"value":1559}," The project was formerly ",{"type":29,"tag":34,"props":1561,"children":1562},{},[1563],{"type":38,"value":1564},"COSAiS",{"type":38,"value":1545},{"type":29,"tag":34,"props":1567,"children":1568},{},[1569],{"type":38,"value":1570},"On 20 Oct 2026 NIST renamed it \"SP 800-53 Control Overlays for Super Intelligence Systems (COSIS)\"",{"type":38,"value":1572},", citing the ",{"type":29,"tag":34,"props":1574,"children":1575},{},[1576],{"type":38,"value":1577},"29 Sep 2026 Executive Order \"Inaugurating the Era of Super Intelligence\"",{"type":38,"value":1579}," (reported as EO 14434). The order tells agencies to use \"Super Intelligence\u002FSI\" instead of \"AI\" in non-statutory documents. ",{"type":29,"tag":63,"props":1581,"children":1582},{},[1583],{"type":38,"value":1584},"V: CSRC page; EO existence V via whitehouse.gov search results; EO number S",{"type":29,"tag":297,"props":1586,"children":1587},{},[1588,1610,1632],{"type":29,"tag":136,"props":1589,"children":1590},{},[1591,1593,1598,1600,1605,1606],{"type":38,"value":1592},"Milestones: concept paper on 14 Aug 2025, then an annotated outline for the ",{"type":29,"tag":101,"props":1594,"children":1595},{},[1596],{"type":38,"value":1597},"predictive",{"type":38,"value":1599}," overlay on 8 Jan 2026 (feedback by 13 Feb 2026). There is ",{"type":29,"tag":34,"props":1601,"children":1602},{},[1603],{"type":38,"value":1604},"no initial public draft of any overlay yet",{"type":38,"value":1545},{"type":29,"tag":63,"props":1607,"children":1608},{},[1609],{"type":38,"value":67},{"type":29,"tag":136,"props":1611,"children":1612},{},[1613,1615,1619,1621,1626,1628],{"type":38,"value":1614},"Planned overlays: Generative SI (LLM assistant), Predictive SI, Single-agent, Multi-agent, and Security controls for SI developers. ",{"type":29,"tag":63,"props":1616,"children":1617},{},[1618],{"type":38,"value":67},{"type":38,"value":1620}," The predictive outline assumes the SP 800-53B ",{"type":29,"tag":34,"props":1622,"children":1623},{},[1624],{"type":38,"value":1625},"moderate",{"type":38,"value":1627}," baseline is already in place. ",{"type":29,"tag":63,"props":1629,"children":1630},{},[1631],{"type":38,"value":77},{"type":29,"tag":136,"props":1633,"children":1634},{},[1635,1640,1642],{"type":29,"tag":34,"props":1636,"children":1637},{},[1638],{"type":38,"value":1639},"Design implication:",{"type":38,"value":1641}," US federal artefacts after October 2026 may say \"SI\" where they used to say \"AI\". Keep AI RMF identifiers as they are, because previously issued documents were not altered. ",{"type":29,"tag":63,"props":1643,"children":1644},{},[1645],{"type":38,"value":67},{"type":29,"tag":290,"props":1647,"children":1649},{"id":1648},"b-native-structure-1",[1650],{"type":38,"value":423},{"type":29,"tag":30,"props":1652,"children":1653},{},[1654,1659,1661,1666,1668],{"type":29,"tag":34,"props":1655,"children":1656},{},[1657],{"type":38,"value":1658},"AI RMF:",{"type":38,"value":1660}," 4 functions → ",{"type":29,"tag":34,"props":1662,"children":1663},{},[1664],{"type":38,"value":1665},"19 categories → 72 subcategories",{"type":38,"value":1667}," (GOVERN 6 categories with 19 subcategories, MAP 5 with 18, MEASURE 4 with 22, MANAGE 4 with 13). ",{"type":29,"tag":63,"props":1669,"children":1670},{},[1671],{"type":38,"value":87},{"type":29,"tag":440,"props":1673,"children":1674},{},[1675,1691],{"type":29,"tag":444,"props":1676,"children":1677},{},[1678],{"type":29,"tag":448,"props":1679,"children":1680},{},[1681,1686],{"type":29,"tag":452,"props":1682,"children":1683},{},[1684],{"type":38,"value":1685},"Category",{"type":29,"tag":452,"props":1687,"children":1688},{},[1689],{"type":38,"value":1690},"Outcome (abridged)",{"type":29,"tag":468,"props":1692,"children":1693},{},[1694,1707,1720,1733,1746,1759,1772,1785,1798,1811,1824,1837,1850,1863,1876,1889,1902,1915,1928],{"type":29,"tag":448,"props":1695,"children":1696},{},[1697,1702],{"type":29,"tag":475,"props":1698,"children":1699},{},[1700],{"type":38,"value":1701},"GOVERN 1",{"type":29,"tag":475,"props":1703,"children":1704},{},[1705],{"type":38,"value":1706},"Policies, processes, procedures and practices for AI risk are in place, transparent and implemented",{"type":29,"tag":448,"props":1708,"children":1709},{},[1710,1715],{"type":29,"tag":475,"props":1711,"children":1712},{},[1713],{"type":38,"value":1714},"GOVERN 2",{"type":29,"tag":475,"props":1716,"children":1717},{},[1718],{"type":38,"value":1719},"Accountability structures (roles, training)",{"type":29,"tag":448,"props":1721,"children":1722},{},[1723,1728],{"type":29,"tag":475,"props":1724,"children":1725},{},[1726],{"type":38,"value":1727},"GOVERN 3",{"type":29,"tag":475,"props":1729,"children":1730},{},[1731],{"type":38,"value":1732},"Workforce diversity, equity, inclusion and accessibility in AI risk decisions",{"type":29,"tag":448,"props":1734,"children":1735},{},[1736,1741],{"type":29,"tag":475,"props":1737,"children":1738},{},[1739],{"type":38,"value":1740},"GOVERN 4",{"type":29,"tag":475,"props":1742,"children":1743},{},[1744],{"type":38,"value":1745},"Culture that considers and communicates AI risk",{"type":29,"tag":448,"props":1747,"children":1748},{},[1749,1754],{"type":29,"tag":475,"props":1750,"children":1751},{},[1752],{"type":38,"value":1753},"GOVERN 5",{"type":29,"tag":475,"props":1755,"children":1756},{},[1757],{"type":38,"value":1758},"Engagement with relevant AI actors",{"type":29,"tag":448,"props":1760,"children":1761},{},[1762,1767],{"type":29,"tag":475,"props":1763,"children":1764},{},[1765],{"type":38,"value":1766},"GOVERN 6",{"type":29,"tag":475,"props":1768,"children":1769},{},[1770],{"type":38,"value":1771},"Policies and procedures for third-party software, data and supply-chain AI risk",{"type":29,"tag":448,"props":1773,"children":1774},{},[1775,1780],{"type":29,"tag":475,"props":1776,"children":1777},{},[1778],{"type":38,"value":1779},"MAP 1",{"type":29,"tag":475,"props":1781,"children":1782},{},[1783],{"type":38,"value":1784},"Context established and understood",{"type":29,"tag":448,"props":1786,"children":1787},{},[1788,1793],{"type":29,"tag":475,"props":1789,"children":1790},{},[1791],{"type":38,"value":1792},"MAP 2",{"type":29,"tag":475,"props":1794,"children":1795},{},[1796],{"type":38,"value":1797},"AI system categorised",{"type":29,"tag":448,"props":1799,"children":1800},{},[1801,1806],{"type":29,"tag":475,"props":1802,"children":1803},{},[1804],{"type":38,"value":1805},"MAP 3",{"type":29,"tag":475,"props":1807,"children":1808},{},[1809],{"type":38,"value":1810},"Capabilities, usage, goals, benefits and costs understood",{"type":29,"tag":448,"props":1812,"children":1813},{},[1814,1819],{"type":29,"tag":475,"props":1815,"children":1816},{},[1817],{"type":38,"value":1818},"MAP 4",{"type":29,"tag":475,"props":1820,"children":1821},{},[1822],{"type":38,"value":1823},"Risks and benefits mapped for all components, including third-party ones",{"type":29,"tag":448,"props":1825,"children":1826},{},[1827,1832],{"type":29,"tag":475,"props":1828,"children":1829},{},[1830],{"type":38,"value":1831},"MAP 5",{"type":29,"tag":475,"props":1833,"children":1834},{},[1835],{"type":38,"value":1836},"Impacts on individuals, groups, organisations and society characterised",{"type":29,"tag":448,"props":1838,"children":1839},{},[1840,1845],{"type":29,"tag":475,"props":1841,"children":1842},{},[1843],{"type":38,"value":1844},"MEASURE 1",{"type":29,"tag":475,"props":1846,"children":1847},{},[1848],{"type":38,"value":1849},"Methods and metrics identified and applied",{"type":29,"tag":448,"props":1851,"children":1852},{},[1853,1858],{"type":29,"tag":475,"props":1854,"children":1855},{},[1856],{"type":38,"value":1857},"MEASURE 2",{"type":29,"tag":475,"props":1859,"children":1860},{},[1861],{"type":38,"value":1862},"Systems evaluated for trustworthy characteristics",{"type":29,"tag":448,"props":1864,"children":1865},{},[1866,1871],{"type":29,"tag":475,"props":1867,"children":1868},{},[1869],{"type":38,"value":1870},"MEASURE 3",{"type":29,"tag":475,"props":1872,"children":1873},{},[1874],{"type":38,"value":1875},"Mechanisms to track identified AI risks over time",{"type":29,"tag":448,"props":1877,"children":1878},{},[1879,1884],{"type":29,"tag":475,"props":1880,"children":1881},{},[1882],{"type":38,"value":1883},"MEASURE 4",{"type":29,"tag":475,"props":1885,"children":1886},{},[1887],{"type":38,"value":1888},"Feedback on measurement efficacy",{"type":29,"tag":448,"props":1890,"children":1891},{},[1892,1897],{"type":29,"tag":475,"props":1893,"children":1894},{},[1895],{"type":38,"value":1896},"MANAGE 1",{"type":29,"tag":475,"props":1898,"children":1899},{},[1900],{"type":38,"value":1901},"Risks prioritised, responded to and managed",{"type":29,"tag":448,"props":1903,"children":1904},{},[1905,1910],{"type":29,"tag":475,"props":1906,"children":1907},{},[1908],{"type":38,"value":1909},"MANAGE 2",{"type":29,"tag":475,"props":1911,"children":1912},{},[1913],{"type":38,"value":1914},"Strategies to maximise benefits and minimise harms",{"type":29,"tag":448,"props":1916,"children":1917},{},[1918,1923],{"type":29,"tag":475,"props":1919,"children":1920},{},[1921],{"type":38,"value":1922},"MANAGE 3",{"type":29,"tag":475,"props":1924,"children":1925},{},[1926],{"type":38,"value":1927},"Third-party AI risks and benefits managed",{"type":29,"tag":448,"props":1929,"children":1930},{},[1931,1936],{"type":29,"tag":475,"props":1932,"children":1933},{},[1934],{"type":38,"value":1935},"MANAGE 4",{"type":29,"tag":475,"props":1937,"children":1938},{},[1939],{"type":38,"value":1940},"Risk treatments, response, recovery and communication documented and monitored",{"type":29,"tag":30,"props":1942,"children":1943},{},[1944,1949,1951,1956,1957,1962],{"type":29,"tag":34,"props":1945,"children":1946},{},[1947],{"type":38,"value":1948},"AI 600-1",{"type":38,"value":1950}," lists ",{"type":29,"tag":34,"props":1952,"children":1953},{},[1954],{"type":38,"value":1955},"12 GenAI risks",{"type":38,"value":354},{"type":29,"tag":63,"props":1958,"children":1959},{},[1960],{"type":38,"value":1961},"K; S agrees on the count",{"type":38,"value":675},{"type":29,"tag":132,"props":1964,"children":1965},{},[1966,1971,1976,1981,1986,1991,1996,2001,2006,2011,2016,2021],{"type":29,"tag":136,"props":1967,"children":1968},{},[1969],{"type":38,"value":1970},"CBRN Information or Capabilities",{"type":29,"tag":136,"props":1972,"children":1973},{},[1974],{"type":38,"value":1975},"Confabulation",{"type":29,"tag":136,"props":1977,"children":1978},{},[1979],{"type":38,"value":1980},"Dangerous, Violent or Hateful Content",{"type":29,"tag":136,"props":1982,"children":1983},{},[1984],{"type":38,"value":1985},"Data Privacy",{"type":29,"tag":136,"props":1987,"children":1988},{},[1989],{"type":38,"value":1990},"Environmental Impacts",{"type":29,"tag":136,"props":1992,"children":1993},{},[1994],{"type":38,"value":1995},"Harmful Bias and Homogenization",{"type":29,"tag":136,"props":1997,"children":1998},{},[1999],{"type":38,"value":2000},"Human-AI Configuration",{"type":29,"tag":136,"props":2002,"children":2003},{},[2004],{"type":38,"value":2005},"Information Integrity",{"type":29,"tag":136,"props":2007,"children":2008},{},[2009],{"type":38,"value":2010},"Information Security",{"type":29,"tag":136,"props":2012,"children":2013},{},[2014],{"type":38,"value":2015},"Intellectual Property",{"type":29,"tag":136,"props":2017,"children":2018},{},[2019],{"type":38,"value":2020},"Obscene, Degrading and\u002For Abusive Content",{"type":29,"tag":136,"props":2022,"children":2023},{},[2024],{"type":38,"value":2025},"Value Chain and Component Integration",{"type":29,"tag":30,"props":2027,"children":2028},{},[2029],{"type":38,"value":2030},"It also gives about 200 suggested actions, each keyed to an AI RMF subcategory (format like GV-1.6-001).",{"type":29,"tag":290,"props":2032,"children":2034},{"id":2033},"c-who-asks-and-why-1",[2035],{"type":38,"value":843},{"type":29,"tag":297,"props":2037,"children":2038},{},[2039,2044,2053,2058],{"type":29,"tag":136,"props":2040,"children":2041},{},[2042],{"type":38,"value":2043},"US federal agencies and contractors (OMB AI memos reference it).",{"type":29,"tag":136,"props":2045,"children":2046},{},[2047,2049],{"type":38,"value":2048},"US state laws: Colorado's AI Act and a Texas statute give an affirmative defence or safe harbour for conformance with a recognised framework such as the AI RMF. ",{"type":29,"tag":63,"props":2050,"children":2051},{},[2052],{"type":38,"value":77},{"type":29,"tag":136,"props":2054,"children":2055},{},[2056],{"type":38,"value":2057},"Enterprise risk, GRC and model-risk teams, and boards wanting a common language.",{"type":29,"tag":136,"props":2059,"children":2060},{},[2061],{"type":38,"value":2062},"Buyer questionnaires (\"do you align to NIST AI RMF?\").",{"type":29,"tag":290,"props":2064,"children":2066},{"id":2065},"d-how-evidence-works-1",[2067],{"type":38,"value":877},{"type":29,"tag":297,"props":2069,"children":2070},{},[2071,2088,2093],{"type":29,"tag":136,"props":2072,"children":2073},{},[2074,2079,2081,2086],{"type":29,"tag":34,"props":2075,"children":2076},{},[2077],{"type":38,"value":2078},"Self-assessment.",{"type":38,"value":2080}," There is no certification or accredited auditor. Organisations build a current-state and target-state ",{"type":29,"tag":101,"props":2082,"children":2083},{},[2084],{"type":38,"value":2085},"profile",{"type":38,"value":2087},", map controls to subcategories, and keep artefacts (policies, inventories, risk registers, monitoring records).",{"type":29,"tag":136,"props":2089,"children":2090},{},[2091],{"type":38,"value":2092},"Internal audit or third parties may give an \"alignment assessment\", which is advisory only.",{"type":29,"tag":136,"props":2094,"children":2095},{},[2096],{"type":38,"value":2097},"Evidence expectation: documented processes plus records showing they run.",{"type":29,"tag":290,"props":2099,"children":2101},{"id":2100},"e-what-qpoint-can-evidence-1",[2102],{"type":38,"value":896},{"type":29,"tag":440,"props":2104,"children":2105},{},[2106,2126],{"type":29,"tag":444,"props":2107,"children":2108},{},[2109],{"type":29,"tag":448,"props":2110,"children":2111},{},[2112,2117,2121],{"type":29,"tag":452,"props":2113,"children":2114},{},[2115],{"type":38,"value":2116},"Subcategory",{"type":29,"tag":452,"props":2118,"children":2119},{},[2120],{"type":38,"value":915},{"type":29,"tag":452,"props":2122,"children":2123},{},[2124],{"type":38,"value":2125},"Notes",{"type":29,"tag":468,"props":2127,"children":2128},{},[2129,2154,2183,2212,2234,2263,2288,2313,2345,2374,2404],{"type":29,"tag":448,"props":2130,"children":2131},{},[2132,2142,2149],{"type":29,"tag":475,"props":2133,"children":2134},{},[2135,2140],{"type":29,"tag":34,"props":2136,"children":2137},{},[2138],{"type":38,"value":2139},"GV 1.6",{"type":38,"value":2141}," (mechanisms to inventory AI systems)",{"type":29,"tag":475,"props":2143,"children":2144},{},[2145],{"type":29,"tag":34,"props":2146,"children":2147},{},[2148],{"type":38,"value":939},{"type":29,"tag":475,"props":2150,"children":2151},{},[2152],{"type":38,"value":2153},"This is the canonical home for continuous AI inventory: providers, models, agents, MCP servers, users.",{"type":29,"tag":448,"props":2155,"children":2156},{},[2157,2174,2178],{"type":29,"tag":475,"props":2158,"children":2159},{},[2160,2165,2167,2172],{"type":29,"tag":34,"props":2161,"children":2162},{},[2163],{"type":38,"value":2164},"GV 6.1",{"type":38,"value":2166}," (third-party AI risk policies) \u002F ",{"type":29,"tag":34,"props":2168,"children":2169},{},[2170],{"type":38,"value":2171},"GV 6.2",{"type":38,"value":2173}," (contingency for third-party failures)",{"type":29,"tag":475,"props":2175,"children":2176},{},[2177],{"type":38,"value":1001},{"type":29,"tag":475,"props":2179,"children":2180},{},[2181],{"type":38,"value":2182},"Policy enforcement records prove a third-party policy is applied. Qpoint does not write the policy.",{"type":29,"tag":448,"props":2184,"children":2185},{},[2186,2203,2207],{"type":29,"tag":475,"props":2187,"children":2188},{},[2189,2194,2196,2201],{"type":29,"tag":34,"props":2190,"children":2191},{},[2192],{"type":38,"value":2193},"MP 4.1",{"type":38,"value":2195}," (mapping risks of components incl. third-party software and data) \u002F ",{"type":29,"tag":34,"props":2197,"children":2198},{},[2199],{"type":38,"value":2200},"MP 4.2",{"type":38,"value":2202}," (internal risk controls for components)",{"type":29,"tag":475,"props":2204,"children":2205},{},[2206],{"type":38,"value":1001},{"type":29,"tag":475,"props":2208,"children":2209},{},[2210],{"type":38,"value":2211},"The data-flow map (which data reaches which provider) feeds the mapping.",{"type":29,"tag":448,"props":2213,"children":2214},{},[2215,2225,2229],{"type":29,"tag":475,"props":2216,"children":2217},{},[2218,2223],{"type":29,"tag":34,"props":2219,"children":2220},{},[2221],{"type":38,"value":2222},"MS 2.4",{"type":38,"value":2224}," (system and component behaviour monitored in production)",{"type":29,"tag":475,"props":2226,"children":2227},{},[2228],{"type":38,"value":960},{"type":29,"tag":475,"props":2230,"children":2231},{},[2232],{"type":38,"value":2233},"Strong for usage and flow behaviour; nothing for model output quality.",{"type":29,"tag":448,"props":2235,"children":2236},{},[2237,2254,2258],{"type":29,"tag":475,"props":2238,"children":2239},{},[2240,2245,2247,2252],{"type":29,"tag":34,"props":2241,"children":2242},{},[2243],{"type":38,"value":2244},"MS 2.7",{"type":38,"value":2246}," (security and resilience evaluated) \u002F ",{"type":29,"tag":34,"props":2248,"children":2249},{},[2250],{"type":38,"value":2251},"MS 2.10",{"type":38,"value":2253}," (privacy risk examined)",{"type":29,"tag":475,"props":2255,"children":2256},{},[2257],{"type":38,"value":1001},{"type":29,"tag":475,"props":2259,"children":2260},{},[2261],{"type":38,"value":2262},"Redaction efficacy and exfiltration attempts blocked.",{"type":29,"tag":448,"props":2264,"children":2265},{},[2266,2276,2283],{"type":29,"tag":475,"props":2267,"children":2268},{},[2269,2274],{"type":29,"tag":34,"props":2270,"children":2271},{},[2272],{"type":38,"value":2273},"MS 3.1",{"type":38,"value":2275}," (track existing, unanticipated and emergent risks)",{"type":29,"tag":475,"props":2277,"children":2278},{},[2279],{"type":29,"tag":34,"props":2280,"children":2281},{},[2282],{"type":38,"value":939},{"type":29,"tag":475,"props":2284,"children":2285},{},[2286],{"type":38,"value":2287},"First-seen tools and models, shadow AI.",{"type":29,"tag":448,"props":2289,"children":2290},{},[2291,2301,2308],{"type":29,"tag":475,"props":2292,"children":2293},{},[2294,2299],{"type":29,"tag":34,"props":2295,"children":2296},{},[2297],{"type":38,"value":2298},"MG 2.4",{"type":38,"value":2300}," (mechanisms to supersede, disengage or deactivate)",{"type":29,"tag":475,"props":2302,"children":2303},{},[2304],{"type":29,"tag":34,"props":2305,"children":2306},{},[2307],{"type":38,"value":939},{"type":29,"tag":475,"props":2309,"children":2310},{},[2311],{"type":38,"value":2312},"Block or kill policy on provider, model or MCP server, with timestamped enforcement events.",{"type":29,"tag":448,"props":2314,"children":2315},{},[2316,2333,2340],{"type":29,"tag":475,"props":2317,"children":2318},{},[2319,2324,2326,2331],{"type":29,"tag":34,"props":2320,"children":2321},{},[2322],{"type":38,"value":2323},"MG 3.1",{"type":38,"value":2325}," (third-party AI risk monitored, controls applied) \u002F ",{"type":29,"tag":34,"props":2327,"children":2328},{},[2329],{"type":38,"value":2330},"MG 3.2",{"type":38,"value":2332}," (pre-trained models monitored)",{"type":29,"tag":475,"props":2334,"children":2335},{},[2336],{"type":29,"tag":34,"props":2337,"children":2338},{},[2339],{"type":38,"value":939},{"type":29,"tag":475,"props":2341,"children":2342},{},[2343],{"type":38,"value":2344},"Third-party AI use is exactly what Qpoint sees.",{"type":29,"tag":448,"props":2346,"children":2347},{},[2348,2365,2369],{"type":29,"tag":475,"props":2349,"children":2350},{},[2351,2356,2358,2363],{"type":29,"tag":34,"props":2352,"children":2353},{},[2354],{"type":38,"value":2355},"MG 4.1",{"type":38,"value":2357}," (post-deployment monitoring plans) \u002F ",{"type":29,"tag":34,"props":2359,"children":2360},{},[2361],{"type":38,"value":2362},"MG 4.3",{"type":38,"value":2364}," (incidents communicated)",{"type":29,"tag":475,"props":2366,"children":2367},{},[2368],{"type":38,"value":1001},{"type":29,"tag":475,"props":2370,"children":2371},{},[2372],{"type":38,"value":2373},"Alerts and incident records; the response process sits elsewhere.",{"type":29,"tag":448,"props":2375,"children":2376},{},[2377,2395,2399],{"type":29,"tag":475,"props":2378,"children":2379},{},[2380,2382,2387,2389,2393],{"type":38,"value":2381},"AI 600-1 risks: ",{"type":29,"tag":34,"props":2383,"children":2384},{},[2385],{"type":38,"value":2386},"Information Security, Data Privacy, Value Chain & Component Integration, Intellectual Property",{"type":38,"value":2388}," (outbound code or secrets), ",{"type":29,"tag":34,"props":2390,"children":2391},{},[2392],{"type":38,"value":2000},{"type":38,"value":2394}," (over-reliance signals via usage)",{"type":29,"tag":475,"props":2396,"children":2397},{},[2398],{"type":38,"value":960},{"type":29,"tag":475,"props":2400,"children":2401},{},[2402],{"type":38,"value":2403},"Usage and flow evidence for these four or five risks.",{"type":29,"tag":448,"props":2405,"children":2406},{},[2407,2418,2422],{"type":29,"tag":475,"props":2408,"children":2409},{},[2410,2412,2416],{"type":38,"value":2411},"Cyber AI Profile ",{"type":29,"tag":34,"props":2413,"children":2414},{},[2415],{"type":38,"value":1522},{"type":38,"value":2417}," focus area",{"type":29,"tag":475,"props":2419,"children":2420},{},[2421],{"type":38,"value":1001},{"type":29,"tag":475,"props":2423,"children":2424},{},[2425],{"type":38,"value":2426},"Asset inventory (ID.AM), data security (PR.DS) and continuous monitoring (DE.CM) for AI components.",{"type":29,"tag":30,"props":2428,"children":2429},{},[2430],{"type":29,"tag":34,"props":2431,"children":2432},{},[2433],{"type":38,"value":1260},{"type":29,"tag":297,"props":2435,"children":2436},{},[2437,2442,2447,2452],{"type":29,"tag":136,"props":2438,"children":2439},{},[2440],{"type":38,"value":2441},"GOVERN 2–5 (people, culture, diversity, stakeholder engagement).",{"type":29,"tag":136,"props":2443,"children":2444},{},[2445],{"type":38,"value":2446},"MAP 1–3 and MAP 5 (context, categorisation, impacts on society).",{"type":29,"tag":136,"props":2448,"children":2449},{},[2450],{"type":38,"value":2451},"MEASURE 2 trustworthiness testing (bias, validity, explainability).",{"type":29,"tag":136,"props":2453,"children":2454},{},[2455],{"type":38,"value":2456},"600-1 risks: CBRN, Confabulation, Environmental, Bias, Obscene and Information-Integrity content.",{"type":29,"tag":290,"props":2458,"children":2460},{"id":2459},"f-crosswalks-1",[2461],{"type":38,"value":1268},{"type":29,"tag":297,"props":2463,"children":2464},{},[2465,2482,2505],{"type":29,"tag":136,"props":2466,"children":2467},{},[2468,2470,2475,2477],{"type":38,"value":2469},"NIST's AI Resource Center (airc.nist.gov) hosts crosswalks, including ",{"type":29,"tag":34,"props":2471,"children":2472},{},[2473],{"type":38,"value":2474},"AI RMF ↔ ISO\u002FIEC 42001",{"type":38,"value":2476}," (community-submitted; reportedly Microsoft-contributed, 72 rows, one per subcategory, hosted without endorsement) and AI RMF ↔ ISO\u002FIEC 23894. Other crosswalks cover OECD and the EU AI Act. ",{"type":29,"tag":63,"props":2478,"children":2479},{},[2480],{"type":38,"value":2481},"S; airc page not fetched",{"type":29,"tag":136,"props":2483,"children":2484},{},[2485,2487,2492,2494,2498,2500,2504],{"type":38,"value":2486},"AI 600-1 is mapped by ",{"type":29,"tag":34,"props":2488,"children":2489},{},[2490],{"type":38,"value":2491},"CSA AICM",{"type":38,"value":2493}," (official download) ",{"type":29,"tag":63,"props":2495,"children":2496},{},[2497],{"type":38,"value":67},{"type":38,"value":2499}," and by AIUC-1 at function level ",{"type":29,"tag":63,"props":2501,"children":2502},{},[2503],{"type":38,"value":67},{"type":38,"value":120},{"type":29,"tag":136,"props":2506,"children":2507},{},[2508,2510,2515,2517,2521],{"type":38,"value":2509},"IR 8596 is organised on ",{"type":29,"tag":34,"props":2511,"children":2512},{},[2513],{"type":38,"value":2514},"CSF 2.0",{"type":38,"value":2516}," outcomes ",{"type":29,"tag":63,"props":2518,"children":2519},{},[2520],{"type":38,"value":67},{"type":38,"value":2522},", so it inherits CSF's mappings to SP 800-53 and others.",{"type":29,"tag":30,"props":2524,"children":2525},{},[2526,2530,2531,2537,2538,2544,2545,2551,2552,2558,2559,2565,2567,2573,2574,2580,2581],{"type":29,"tag":34,"props":2527,"children":2528},{},[2529],{"type":38,"value":1351},{"type":38,"value":354},{"type":29,"tag":1354,"props":2532,"children":2535},{"href":2533,"rel":2534},"https:\u002F\u002Fwww.nist.gov\u002Fitl\u002Fai-risk-management-framework",[1358],[2536],{"type":38,"value":2533},{"type":38,"value":1362},{"type":29,"tag":1354,"props":2539,"children":2542},{"href":2540,"rel":2541},"https:\u002F\u002Fnvlpubs.nist.gov\u002Fnistpubs\u002Fai\u002Fnist.ai.100-1.pdf",[1358],[2543],{"type":38,"value":2540},{"type":38,"value":1362},{"type":29,"tag":1354,"props":2546,"children":2549},{"href":2547,"rel":2548},"https:\u002F\u002Fwww.nist.gov\u002Fpublications\u002Fartificial-intelligence-risk-management-framework-generative-artificial-intelligence",[1358],[2550],{"type":38,"value":2547},{"type":38,"value":1362},{"type":29,"tag":1354,"props":2553,"children":2556},{"href":2554,"rel":2555},"https:\u002F\u002Fcsrc.nist.gov\u002Fpubs\u002Fir\u002F8596\u002Fiprd",[1358],[2557],{"type":38,"value":2554},{"type":38,"value":1362},{"type":29,"tag":1354,"props":2560,"children":2563},{"href":2561,"rel":2562},"https:\u002F\u002Fcsrc.nist.gov\u002Fprojects\u002Fcosais",[1358],[2564],{"type":38,"value":2561},{"type":38,"value":2566}," (now titled COSIS) · ",{"type":29,"tag":1354,"props":2568,"children":2571},{"href":2569,"rel":2570},"https:\u002F\u002Fcsrc.nist.gov\u002Fcsrc\u002Fmedia\u002FProjects\u002Fcosais\u002Fdocuments\u002FCOSAiS-Predictive-AI-annotated-outline-Jan2026.pdf",[1358],[2572],{"type":38,"value":2569},{"type":38,"value":1362},{"type":29,"tag":1354,"props":2575,"children":2578},{"href":2576,"rel":2577},"https:\u002F\u002Fwww.whitehouse.gov\u002Fpresidential-actions\u002F2026\u002F09\u002Finaugurating-the-era-of-super-intelligence\u002F",[1358],[2579],{"type":38,"value":2576},{"type":38,"value":1362},{"type":29,"tag":1354,"props":2582,"children":2585},{"href":2583,"rel":2584},"https:\u002F\u002Fwww.nccoe.nist.gov\u002Fnews-insights\u002Fcomment-save-date-now-nist-cyber-ai-profile-preliminary-draft-workshop",[1358],[2586],{"type":38,"value":2583},{"type":29,"tag":280,"props":2588,"children":2589},{},[],{"type":29,"tag":284,"props":2591,"children":2593},{"id":2592},"_3-soc-2-aicpa-trust-services-criteria",[2594],{"type":38,"value":15},{"type":29,"tag":290,"props":2596,"children":2598},{"id":2597},"a-identity-and-status-2",[2599],{"type":38,"value":295},{"type":29,"tag":297,"props":2601,"children":2602},{},[2603,2623,2632,2647,2708],{"type":29,"tag":136,"props":2604,"children":2605},{},[2606,2611,2612,2617,2619],{"type":29,"tag":34,"props":2607,"children":2608},{},[2609],{"type":38,"value":2610},"Criteria:",{"type":38,"value":354},{"type":29,"tag":101,"props":2613,"children":2614},{},[2615],{"type":38,"value":2616},"2017 Trust Services Criteria for Security, Availability, Processing Integrity, Confidentiality, and Privacy (With Revised Points of Focus – 2022)",{"type":38,"value":2618},". The current download page is dated 30 Sep 2023. ",{"type":29,"tag":63,"props":2620,"children":2621},{},[2622],{"type":38,"value":67},{"type":29,"tag":136,"props":2624,"children":2625},{},[2626,2630],{"type":29,"tag":34,"props":2627,"children":2628},{},[2629],{"type":38,"value":307},{"type":38,"value":2631}," AICPA Assurance Services Executive Committee (ASEC). The examination is performed under the attestation standards (AT-C 105\u002F205) and the SOC 2 Guide.",{"type":29,"tag":136,"props":2633,"children":2634},{},[2635,2639,2640,2645],{"type":29,"tag":34,"props":2636,"children":2637},{},[2638],{"type":38,"value":380},{"type":38,"value":354},{"type":29,"tag":34,"props":2641,"children":2642},{},[2643],{"type":38,"value":2644},"attestation criteria",{"type":38,"value":2646}," that a licensed CPA firm uses to give an opinion. It is not a certification.",{"type":29,"tag":136,"props":2648,"children":2649},{},[2650,2655],{"type":29,"tag":34,"props":2651,"children":2652},{},[2653],{"type":38,"value":2654},"AI-specific guidance: none.",{"type":29,"tag":297,"props":2656,"children":2657},{},[2658,2674,2690,2699],{"type":29,"tag":136,"props":2659,"children":2660},{},[2661,2663,2668,2670],{"type":38,"value":2662},"The AICPA has issued no AI-specific TSC, no AI points of focus and no authoritative AI addendum, and no exposure draft proposes them. ",{"type":29,"tag":63,"props":2664,"children":2665},{},[2666],{"type":38,"value":2667},"S: CSA research note Aug 2026; several CPA firms",{"type":38,"value":2669}," The AICPA download page shows no newer version or AI guidance. ",{"type":29,"tag":63,"props":2671,"children":2672},{},[2673],{"type":38,"value":67},{"type":29,"tag":136,"props":2675,"children":2676},{},[2677,2679,2684,2686],{"type":38,"value":2678},"The only AICPA AI document of 2026 is the Forensic & Valuation Services ",{"type":29,"tag":101,"props":2680,"children":2681},{},[2682],{"type":38,"value":2683},"Guidelines for Responsible Use of AI",{"type":38,"value":2685},". It is non-authoritative and about CPAs' own use of AI. ",{"type":29,"tag":63,"props":2687,"children":2688},{},[2689],{"type":38,"value":77},{"type":29,"tag":136,"props":2691,"children":2692},{},[2693,2695],{"type":38,"value":2694},"The 2026 attestation proposals (AT-C 105\u002F205\u002F210 revisions plus sustainability sections) don't touch the TSC. ",{"type":29,"tag":63,"props":2696,"children":2697},{},[2698],{"type":38,"value":77},{"type":29,"tag":136,"props":2700,"children":2701},{},[2702,2704],{"type":38,"value":2703},"Practice reality: \"the criteria didn't change, but the examination did\". Auditors fold AI into CC3, CC6, CC7, CC9 and PI1. ",{"type":29,"tag":63,"props":2705,"children":2706},{},[2707],{"type":38,"value":77},{"type":29,"tag":136,"props":2709,"children":2710},{},[2711,2716,2718,2723,2725],{"type":29,"tag":34,"props":2712,"children":2713},{},[2714],{"type":38,"value":2715},"AI-flavoured SOC 2 route:",{"type":38,"value":2717}," CSA's ",{"type":29,"tag":34,"props":2719,"children":2720},{},[2721],{"type":38,"value":2722},"STAR for AI Level 2 \"SOC 2 + AICM\" attestation",{"type":38,"value":2724}," (route a6). Guidance for CPAs on STAR\u002FSTAR for AI attestation was published in Mar 2026. ",{"type":29,"tag":63,"props":2726,"children":2727},{},[2728],{"type":38,"value":2729},"V route; S guidance",{"type":29,"tag":290,"props":2731,"children":2733},{"id":2732},"b-native-structure-2",[2734],{"type":38,"value":423},{"type":29,"tag":30,"props":2736,"children":2737},{},[2738,2740,2745,2747,2752,2754],{"type":38,"value":2739},"The unit is a ",{"type":29,"tag":34,"props":2741,"children":2742},{},[2743],{"type":38,"value":2744},"criterion",{"type":38,"value":2746},", illustrated by ",{"type":29,"tag":34,"props":2748,"children":2749},{},[2750],{"type":38,"value":2751},"points of focus",{"type":38,"value":2753},". Points of focus are not required. ",{"type":29,"tag":63,"props":2755,"children":2756},{},[2757],{"type":38,"value":2758},"K\u002FS",{"type":29,"tag":440,"props":2760,"children":2761},{},[2762,2782],{"type":29,"tag":444,"props":2763,"children":2764},{},[2765],{"type":29,"tag":448,"props":2766,"children":2767},{},[2768,2773,2777],{"type":29,"tag":452,"props":2769,"children":2770},{},[2771],{"type":38,"value":2772},"Series",{"type":29,"tag":452,"props":2774,"children":2775},{},[2776],{"type":38,"value":461},{"type":29,"tag":452,"props":2778,"children":2779},{},[2780],{"type":38,"value":2781},"Sub-criteria",{"type":29,"tag":468,"props":2783,"children":2784},{},[2785,2803,2821,2839,2857,2875,2893,2911,2929],{"type":29,"tag":448,"props":2786,"children":2787},{},[2788,2793,2798],{"type":29,"tag":475,"props":2789,"children":2790},{},[2791],{"type":38,"value":2792},"CC1",{"type":29,"tag":475,"props":2794,"children":2795},{},[2796],{"type":38,"value":2797},"Control Environment",{"type":29,"tag":475,"props":2799,"children":2800},{},[2801],{"type":38,"value":2802},"CC1.1–1.5",{"type":29,"tag":448,"props":2804,"children":2805},{},[2806,2811,2816],{"type":29,"tag":475,"props":2807,"children":2808},{},[2809],{"type":38,"value":2810},"CC2",{"type":29,"tag":475,"props":2812,"children":2813},{},[2814],{"type":38,"value":2815},"Communication and Information",{"type":29,"tag":475,"props":2817,"children":2818},{},[2819],{"type":38,"value":2820},"CC2.1–2.3",{"type":29,"tag":448,"props":2822,"children":2823},{},[2824,2829,2834],{"type":29,"tag":475,"props":2825,"children":2826},{},[2827],{"type":38,"value":2828},"CC3",{"type":29,"tag":475,"props":2830,"children":2831},{},[2832],{"type":38,"value":2833},"Risk Assessment",{"type":29,"tag":475,"props":2835,"children":2836},{},[2837],{"type":38,"value":2838},"CC3.1–3.4",{"type":29,"tag":448,"props":2840,"children":2841},{},[2842,2847,2852],{"type":29,"tag":475,"props":2843,"children":2844},{},[2845],{"type":38,"value":2846},"CC4",{"type":29,"tag":475,"props":2848,"children":2849},{},[2850],{"type":38,"value":2851},"Monitoring Activities",{"type":29,"tag":475,"props":2853,"children":2854},{},[2855],{"type":38,"value":2856},"CC4.1–4.2",{"type":29,"tag":448,"props":2858,"children":2859},{},[2860,2865,2870],{"type":29,"tag":475,"props":2861,"children":2862},{},[2863],{"type":38,"value":2864},"CC5",{"type":29,"tag":475,"props":2866,"children":2867},{},[2868],{"type":38,"value":2869},"Control Activities",{"type":29,"tag":475,"props":2871,"children":2872},{},[2873],{"type":38,"value":2874},"CC5.1–5.3",{"type":29,"tag":448,"props":2876,"children":2877},{},[2878,2883,2888],{"type":29,"tag":475,"props":2879,"children":2880},{},[2881],{"type":38,"value":2882},"CC6",{"type":29,"tag":475,"props":2884,"children":2885},{},[2886],{"type":38,"value":2887},"Logical and Physical Access Controls",{"type":29,"tag":475,"props":2889,"children":2890},{},[2891],{"type":38,"value":2892},"CC6.1–6.8",{"type":29,"tag":448,"props":2894,"children":2895},{},[2896,2901,2906],{"type":29,"tag":475,"props":2897,"children":2898},{},[2899],{"type":38,"value":2900},"CC7",{"type":29,"tag":475,"props":2902,"children":2903},{},[2904],{"type":38,"value":2905},"System Operations",{"type":29,"tag":475,"props":2907,"children":2908},{},[2909],{"type":38,"value":2910},"CC7.1–7.5",{"type":29,"tag":448,"props":2912,"children":2913},{},[2914,2919,2924],{"type":29,"tag":475,"props":2915,"children":2916},{},[2917],{"type":38,"value":2918},"CC8",{"type":29,"tag":475,"props":2920,"children":2921},{},[2922],{"type":38,"value":2923},"Change Management",{"type":29,"tag":475,"props":2925,"children":2926},{},[2927],{"type":38,"value":2928},"CC8.1",{"type":29,"tag":448,"props":2930,"children":2931},{},[2932,2937,2942],{"type":29,"tag":475,"props":2933,"children":2934},{},[2935],{"type":38,"value":2936},"CC9",{"type":29,"tag":475,"props":2938,"children":2939},{},[2940],{"type":38,"value":2941},"Risk Mitigation",{"type":29,"tag":475,"props":2943,"children":2944},{},[2945],{"type":38,"value":2946},"CC9.1–9.2",{"type":29,"tag":30,"props":2948,"children":2949},{},[2950],{"type":38,"value":2951},"That is 33 common criteria (CC1–CC5 follow COSO 2013's 17 principles). The additional categories are A1.1–1.3 (Availability), C1.1–1.2 (Confidentiality), PI1.1–1.5 (Processing Integrity) and P1–P8 (Privacy, 18 criteria). Security (the CCs) is mandatory; the others are optional per engagement.",{"type":29,"tag":290,"props":2953,"children":2955},{"id":2954},"c-who-asks-and-why-2",[2956],{"type":38,"value":843},{"type":29,"tag":297,"props":2958,"children":2959},{},[2960,2970,2975,2984],{"type":29,"tag":136,"props":2961,"children":2962},{},[2963,2968],{"type":29,"tag":34,"props":2964,"children":2965},{},[2966],{"type":38,"value":2967},"Buyers' vendor-risk and procurement teams",{"type":38,"value":2969}," ask for the SOC 2 Type 2 report of every SaaS vendor. It is the US enterprise default.",{"type":29,"tag":136,"props":2971,"children":2972},{},[2973],{"type":38,"value":2974},"The company's own auditors and board.",{"type":29,"tag":136,"props":2976,"children":2977},{},[2978,2980],{"type":38,"value":2979},"Increasingly, buyers append AI questionnaires and expect AI subprocessors (LLM providers) to be listed. ",{"type":29,"tag":63,"props":2981,"children":2982},{},[2983],{"type":38,"value":77},{"type":29,"tag":136,"props":2985,"children":2986},{},[2987,2989,2994,2996],{"type":38,"value":2988},"For Qpoint this works ",{"type":29,"tag":34,"props":2990,"children":2991},{},[2992],{"type":38,"value":2993},"two ways",{"type":38,"value":2995},":\n",{"type":29,"tag":132,"props":2997,"children":2998},{},[2999,3011],{"type":29,"tag":136,"props":3000,"children":3001},{},[3002,3004,3009],{"type":38,"value":3003},"Customers will demand ",{"type":29,"tag":34,"props":3005,"children":3006},{},[3007],{"type":38,"value":3008},"Qpoint's own SOC 2",{"type":38,"value":3010},", because Qpoint becomes a vendor in their CC9.2 and possibly a subservice organisation.",{"type":29,"tag":136,"props":3012,"children":3013},{},[3014,3016,3021],{"type":38,"value":3015},"Customers use Qpoint ",{"type":29,"tag":101,"props":3017,"children":3018},{},[3019],{"type":38,"value":3020},"as a control",{"type":38,"value":3022}," inside their own SOC 2 scope, for example \"we monitor and restrict employee use of unapproved AI services\".",{"type":29,"tag":290,"props":3024,"children":3026},{"id":3025},"d-how-evidence-works-2",[3027],{"type":38,"value":877},{"type":29,"tag":297,"props":3029,"children":3030},{},[3031,3048,3059,3071,3076],{"type":29,"tag":136,"props":3032,"children":3033},{},[3034,3039,3041,3046],{"type":29,"tag":34,"props":3035,"children":3036},{},[3037],{"type":38,"value":3038},"Type 1",{"type":38,"value":3040}," covers design at a point in time. ",{"type":29,"tag":34,"props":3042,"children":3043},{},[3044],{"type":38,"value":3045},"Type 2",{"type":38,"value":3047}," covers design and operating effectiveness over a period, typically 3–12 months.",{"type":29,"tag":136,"props":3049,"children":3050},{},[3051,3053,3058],{"type":38,"value":3052},"The auditor tests controls by inquiry, observation, inspection and re-performance, and ",{"type":29,"tag":34,"props":3054,"children":3055},{},[3056],{"type":38,"value":3057},"samples from complete populations",{"type":38,"value":120},{"type":29,"tag":136,"props":3060,"children":3061},{},[3062,3064,3069],{"type":38,"value":3063},"System-generated reports count as ",{"type":29,"tag":34,"props":3065,"children":3066},{},[3067],{"type":38,"value":3068},"\"information produced by the entity\" (IPE)",{"type":38,"value":3070},", so the auditor must establish completeness and accuracy: query parameters, the full population, timestamps and tamper-evidence.",{"type":29,"tag":136,"props":3072,"children":3073},{},[3074],{"type":38,"value":3075},"Exceptions are reported. Management writes the system description; the auditor issues an opinion.",{"type":29,"tag":136,"props":3077,"children":3078},{},[3079,3083],{"type":29,"tag":34,"props":3080,"children":3081},{},[3082],{"type":38,"value":1639},{"type":38,"value":3084}," Qpoint exports should be IPE-grade, meaning reproducible queries, full-population CSVs, period-bounded, hashed or immutable, and showing policy version at time of event.",{"type":29,"tag":290,"props":3086,"children":3088},{"id":3087},"e-what-qpoint-can-evidence-for-the-customers-soc-2",[3089],{"type":38,"value":3090},"(e) What Qpoint can evidence (for the customer's SOC 2)",{"type":29,"tag":440,"props":3092,"children":3093},{},[3094,3113],{"type":29,"tag":444,"props":3095,"children":3096},{},[3097],{"type":29,"tag":448,"props":3098,"children":3099},{},[3100,3105,3109],{"type":29,"tag":452,"props":3101,"children":3102},{},[3103],{"type":38,"value":3104},"Criterion",{"type":29,"tag":452,"props":3106,"children":3107},{},[3108],{"type":38,"value":915},{"type":29,"tag":452,"props":3110,"children":3111},{},[3112],{"type":38,"value":920},{"type":29,"tag":468,"props":3114,"children":3115},{},[3116,3141,3163,3190,3212,3237,3259,3281,3303,3325,3357,3386,3411,3440],{"type":29,"tag":448,"props":3117,"children":3118},{},[3119,3129,3136],{"type":29,"tag":475,"props":3120,"children":3121},{},[3122,3127],{"type":29,"tag":34,"props":3123,"children":3124},{},[3125],{"type":38,"value":3126},"CC6.7",{"type":38,"value":3128}," (restrict transmission and movement of information to authorised parties)",{"type":29,"tag":475,"props":3130,"children":3131},{},[3132],{"type":29,"tag":34,"props":3133,"children":3134},{},[3135],{"type":38,"value":939},{"type":29,"tag":475,"props":3137,"children":3138},{},[3139],{"type":38,"value":3140},"Redaction and block events; allow-listed AI providers only.",{"type":29,"tag":448,"props":3142,"children":3143},{},[3144,3154,3158],{"type":29,"tag":475,"props":3145,"children":3146},{},[3147,3152],{"type":29,"tag":34,"props":3148,"children":3149},{},[3150],{"type":38,"value":3151},"CC6.6",{"type":38,"value":3153}," (protect against threats from outside system boundaries)",{"type":29,"tag":475,"props":3155,"children":3156},{},[3157],{"type":38,"value":960},{"type":29,"tag":475,"props":3159,"children":3160},{},[3161],{"type":38,"value":3162},"Egress control to AI endpoints.",{"type":29,"tag":448,"props":3164,"children":3165},{},[3166,3176,3185],{"type":29,"tag":475,"props":3167,"children":3168},{},[3169,3174],{"type":29,"tag":34,"props":3170,"children":3171},{},[3172],{"type":38,"value":3173},"CC6.8",{"type":38,"value":3175}," (prevent or detect unauthorised or malicious software)",{"type":29,"tag":475,"props":3177,"children":3178},{},[3179,3183],{"type":29,"tag":34,"props":3180,"children":3181},{},[3182],{"type":38,"value":939},{"type":38,"value":3184}," for unapproved agents, harnesses and MCP servers",{"type":29,"tag":475,"props":3186,"children":3187},{},[3188],{"type":38,"value":3189},"Detection plus gating.",{"type":29,"tag":448,"props":3191,"children":3192},{},[3193,3203,3207],{"type":29,"tag":475,"props":3194,"children":3195},{},[3196,3201],{"type":29,"tag":34,"props":3197,"children":3198},{},[3199],{"type":38,"value":3200},"CC6.1",{"type":38,"value":3202}," (logical access to information assets)",{"type":29,"tag":475,"props":3204,"children":3205},{},[3206],{"type":38,"value":1001},{"type":29,"tag":475,"props":3208,"children":3209},{},[3210],{"type":38,"value":3211},"AI tools and MCP servers as access paths; attribution of use to users.",{"type":29,"tag":448,"props":3213,"children":3214},{},[3215,3225,3232],{"type":29,"tag":475,"props":3216,"children":3217},{},[3218,3223],{"type":29,"tag":34,"props":3219,"children":3220},{},[3221],{"type":38,"value":3222},"CC7.2",{"type":38,"value":3224}," (monitor components for anomalies)",{"type":29,"tag":475,"props":3226,"children":3227},{},[3228],{"type":29,"tag":34,"props":3229,"children":3230},{},[3231],{"type":38,"value":939},{"type":29,"tag":475,"props":3233,"children":3234},{},[3235],{"type":38,"value":3236},"Shadow AI and anomalous volumes.",{"type":29,"tag":448,"props":3238,"children":3239},{},[3240,3250,3254],{"type":29,"tag":475,"props":3241,"children":3242},{},[3243,3248],{"type":29,"tag":34,"props":3244,"children":3245},{},[3246],{"type":38,"value":3247},"CC7.1",{"type":38,"value":3249}," (detect configuration changes or new vulnerabilities)",{"type":29,"tag":475,"props":3251,"children":3252},{},[3253],{"type":38,"value":1001},{"type":29,"tag":475,"props":3255,"children":3256},{},[3257],{"type":38,"value":3258},"New tools and versions first-seen.",{"type":29,"tag":448,"props":3260,"children":3261},{},[3262,3272,3276],{"type":29,"tag":475,"props":3263,"children":3264},{},[3265,3270],{"type":29,"tag":34,"props":3266,"children":3267},{},[3268],{"type":38,"value":3269},"CC7.3–7.4",{"type":38,"value":3271}," (evaluate and respond to events)",{"type":29,"tag":475,"props":3273,"children":3274},{},[3275],{"type":38,"value":1001},{"type":29,"tag":475,"props":3277,"children":3278},{},[3279],{"type":38,"value":3280},"Alerts in; response lives in the ticketing\u002FIR process.",{"type":29,"tag":448,"props":3282,"children":3283},{},[3284,3294,3298],{"type":29,"tag":475,"props":3285,"children":3286},{},[3287,3292],{"type":29,"tag":34,"props":3288,"children":3289},{},[3290],{"type":38,"value":3291},"CC3.2 \u002F CC3.4",{"type":38,"value":3293}," (identify risks, including from changes)",{"type":29,"tag":475,"props":3295,"children":3296},{},[3297],{"type":38,"value":1001},{"type":29,"tag":475,"props":3299,"children":3300},{},[3301],{"type":38,"value":3302},"The inventory feeds the risk assessment.",{"type":29,"tag":448,"props":3304,"children":3305},{},[3306,3316,3320],{"type":29,"tag":475,"props":3307,"children":3308},{},[3309,3314],{"type":29,"tag":34,"props":3310,"children":3311},{},[3312],{"type":38,"value":3313},"CC9.2",{"type":38,"value":3315}," (vendor and business-partner risk)",{"type":29,"tag":475,"props":3317,"children":3318},{},[3319],{"type":38,"value":960},{"type":29,"tag":475,"props":3321,"children":3322},{},[3323],{"type":38,"value":3324},"Shows which AI vendors are actually used against the approved list, plus data classes sent to each. Detects unapproved subprocessors.",{"type":29,"tag":448,"props":3326,"children":3327},{},[3328,3338,3345],{"type":29,"tag":475,"props":3329,"children":3330},{},[3331,3336],{"type":29,"tag":34,"props":3332,"children":3333},{},[3334],{"type":38,"value":3335},"CC5.2 \u002F CC5.3",{"type":38,"value":3337}," (technology controls; policies deployed)",{"type":29,"tag":475,"props":3339,"children":3340},{},[3341],{"type":29,"tag":34,"props":3342,"children":3343},{},[3344],{"type":38,"value":939},{"type":29,"tag":475,"props":3346,"children":3347},{},[3348,3350,3355],{"type":38,"value":3349},"Proof that the AI acceptable-use policy is ",{"type":29,"tag":101,"props":3351,"children":3352},{},[3353],{"type":38,"value":3354},"operating",{"type":38,"value":3356},", not just written.",{"type":29,"tag":448,"props":3358,"children":3359},{},[3360,3377,3381],{"type":29,"tag":475,"props":3361,"children":3362},{},[3363,3368,3370,3375],{"type":29,"tag":34,"props":3364,"children":3365},{},[3366],{"type":38,"value":3367},"CC2.1",{"type":38,"value":3369}," (relevant, quality information) \u002F ",{"type":29,"tag":34,"props":3371,"children":3372},{},[3373],{"type":38,"value":3374},"CC4.1",{"type":38,"value":3376}," (ongoing evaluations)",{"type":29,"tag":475,"props":3378,"children":3379},{},[3380],{"type":38,"value":1001},{"type":29,"tag":475,"props":3382,"children":3383},{},[3384],{"type":38,"value":3385},"Continuous monitoring dashboards.",{"type":29,"tag":448,"props":3387,"children":3388},{},[3389,3399,3406],{"type":29,"tag":475,"props":3390,"children":3391},{},[3392,3397],{"type":29,"tag":34,"props":3393,"children":3394},{},[3395],{"type":38,"value":3396},"C1.1",{"type":38,"value":3398}," (identify and protect confidential information)",{"type":29,"tag":475,"props":3400,"children":3401},{},[3402],{"type":29,"tag":34,"props":3403,"children":3404},{},[3405],{"type":38,"value":939},{"type":29,"tag":475,"props":3407,"children":3408},{},[3409],{"type":38,"value":3410},"Redaction of confidential data classes to AI.",{"type":29,"tag":448,"props":3412,"children":3413},{},[3414,3431,3435],{"type":29,"tag":475,"props":3415,"children":3416},{},[3417,3422,3424,3429],{"type":29,"tag":34,"props":3418,"children":3419},{},[3420],{"type":38,"value":3421},"P6.1",{"type":38,"value":3423}," (disclosure of personal information to third parties) \u002F ",{"type":29,"tag":34,"props":3425,"children":3426},{},[3427],{"type":38,"value":3428},"P4.x",{"type":38,"value":3430}," (use limited to purpose)",{"type":29,"tag":475,"props":3432,"children":3433},{},[3434],{"type":38,"value":1001},{"type":29,"tag":475,"props":3436,"children":3437},{},[3438],{"type":38,"value":3439},"Evidence of which personal data went to which provider.",{"type":29,"tag":448,"props":3441,"children":3442},{},[3443,3453,3457],{"type":29,"tag":475,"props":3444,"children":3445},{},[3446,3451],{"type":29,"tag":34,"props":3447,"children":3448},{},[3449],{"type":38,"value":3450},"PI1.x",{"type":38,"value":3452}," (processing integrity of AI outputs)",{"type":29,"tag":475,"props":3454,"children":3455},{},[3456],{"type":38,"value":1247},{"type":29,"tag":475,"props":3458,"children":3459},{},[3460],{"type":38,"value":3461},"Output accuracy is not observable.",{"type":29,"tag":30,"props":3463,"children":3464},{},[3465,3469],{"type":29,"tag":34,"props":3466,"children":3467},{},[3468],{"type":38,"value":1260},{"type":38,"value":3470}," CC1 (tone at the top, board oversight, HR), CC2.2–2.3 (communications), CC8 change management of the customer's own models, availability, and physical security.",{"type":29,"tag":290,"props":3472,"children":3474},{"id":3473},"f-crosswalks-2",[3475],{"type":38,"value":1268},{"type":29,"tag":297,"props":3477,"children":3478},{},[3479,3504,3519,3528],{"type":29,"tag":136,"props":3480,"children":3481},{},[3482,3484,3489,3491,3498,3500],{"type":38,"value":3483},"AICPA publishes mappings of the 2017 TSC to ISO\u002FIEC 27001, NIST CSF, NIST SP 800-53, COBIT and others. Whether the ISO mapping covers ",{"type":29,"tag":34,"props":3485,"children":3486},{},[3487],{"type":38,"value":3488},"27001:2022 Annex A",{"type":38,"value":3490}," is ",{"type":29,"tag":34,"props":3492,"children":3493},{},[3494],{"type":29,"tag":63,"props":3495,"children":3496},{},[3497],{"type":38,"value":97},{"type":38,"value":3499},"; the file name references the 2017 TSC, and the overlap is about 80% per secondary sources. ",{"type":29,"tag":63,"props":3501,"children":3502},{},[3503],{"type":38,"value":77},{"type":29,"tag":136,"props":3505,"children":3506},{},[3507,3509,3514,3515],{"type":38,"value":3508},"AIUC-1 publishes a ",{"type":29,"tag":34,"props":3510,"children":3511},{},[3512],{"type":38,"value":3513},"SOC 2 crosswalk at criteria level",{"type":38,"value":1545},{"type":29,"tag":63,"props":3516,"children":3517},{},[3518],{"type":38,"value":67},{"type":29,"tag":136,"props":3520,"children":3521},{},[3522,3524],{"type":38,"value":3523},"CSA's STAR for AI has a SOC 2 + AICM attestation path. ",{"type":29,"tag":63,"props":3525,"children":3526},{},[3527],{"type":38,"value":67},{"type":29,"tag":136,"props":3529,"children":3530},{},[3531,3533],{"type":38,"value":3532},"HITRUST maps to SOC 2 through its \"SOC 2 + HITRUST\" reporting. ",{"type":29,"tag":63,"props":3534,"children":3535},{},[3536],{"type":38,"value":87},{"type":29,"tag":30,"props":3538,"children":3539},{},[3540,3544,3545,3551,3552,3558,3559,3565,3566,3572,3573],{"type":29,"tag":34,"props":3541,"children":3542},{},[3543],{"type":38,"value":1351},{"type":38,"value":354},{"type":29,"tag":1354,"props":3546,"children":3549},{"href":3547,"rel":3548},"https:\u002F\u002Fwww.aicpa-cima.com\u002Fresources\u002Fdownload\u002F2017-trust-services-criteria-with-revised-points-of-focus-2022",[1358],[3550],{"type":38,"value":3547},{"type":38,"value":1362},{"type":29,"tag":1354,"props":3553,"children":3556},{"href":3554,"rel":3555},"https:\u002F\u002Flabs.cloudsecurityalliance.org\u002Fresearch\u002Fcsa-research-note-soc2-ai-controls-gap-20260830-csa-styled\u002F",[1358],[3557],{"type":38,"value":3554},{"type":38,"value":1362},{"type":29,"tag":1354,"props":3560,"children":3563},{"href":3561,"rel":3562},"https:\u002F\u002Fwww.aprio.com\u002Finsights-events\u002Fsoc-2-and-ai-in-2026-the-criteria-didnt-change-but-the-examination-did-ins-article\u002F",[1358],[3564],{"type":38,"value":3561},{"type":38,"value":1362},{"type":29,"tag":1354,"props":3567,"children":3570},{"href":3568,"rel":3569},"https:\u002F\u002Fwww.brightdefense.com\u002Fnews\u002Faicpa-advances-2026-attestation-changes-for-soc-2\u002F",[1358],[3571],{"type":38,"value":3568},{"type":38,"value":1362},{"type":29,"tag":1354,"props":3574,"children":3577},{"href":3575,"rel":3576},"https:\u002F\u002Fcloudsecurityalliance.org\u002Fstar\u002Fai\u002F",[1358],[3578],{"type":38,"value":3575},{"type":29,"tag":280,"props":3580,"children":3581},{},[],{"type":29,"tag":284,"props":3583,"children":3585},{"id":3584},"_4-aiuc-1-artificial-intelligence-underwriting-company-standard-for-ai-agents",[3586],{"type":38,"value":16},{"type":29,"tag":290,"props":3588,"children":3590},{"id":3589},"a-identity-and-status-3",[3591],{"type":38,"value":295},{"type":29,"tag":297,"props":3593,"children":3594},{},[3595,3608,3629,3650,3673,3701,3722,3736],{"type":29,"tag":136,"props":3596,"children":3597},{},[3598,3602,3604],{"type":29,"tag":34,"props":3599,"children":3600},{},[3601],{"type":38,"value":307},{"type":38,"value":3603}," the Artificial Intelligence Underwriting Company (AIUC). First launched on 22 Jul 2025. ",{"type":29,"tag":63,"props":3605,"children":3606},{},[3607],{"type":38,"value":67},{"type":29,"tag":136,"props":3609,"children":3610},{},[3611,3616,3618,3623,3625],{"type":29,"tag":34,"props":3612,"children":3613},{},[3614],{"type":38,"value":3615},"Releases are quarterly",{"type":38,"value":3617},": 1 Oct 2025, 15 Jan 2026, 15 Apr 2026, 15 Jul 2026 and ",{"type":29,"tag":34,"props":3619,"children":3620},{},[3621],{"type":38,"value":3622},"15 Oct 2026 (Q4-2026, current)",{"type":38,"value":3624},". The next is due 15 Jan 2027. ",{"type":29,"tag":63,"props":3626,"children":3627},{},[3628],{"type":38,"value":67},{"type":29,"tag":136,"props":3630,"children":3631},{},[3632,3636,3637,3642,3644,3649],{"type":29,"tag":34,"props":3633,"children":3634},{},[3635],{"type":38,"value":380},{"type":38,"value":382},{"type":29,"tag":34,"props":3638,"children":3639},{},[3640],{"type":38,"value":3641},"certification standard for AI agents and products",{"type":38,"value":3643}," (security, safety and reliability). It combines an accredited third-party audit of controls with AIUC-run technical testing (red-teaming, typically 1,000–5,000 scenarios) and ",{"type":29,"tag":34,"props":3645,"children":3646},{},[3647],{"type":38,"value":3648},"quarterly re-tests",{"type":38,"value":120},{"type":29,"tag":136,"props":3651,"children":3652},{},[3653,3655,3660,3662,3667,3669],{"type":38,"value":3654},"The certificate covers ",{"type":29,"tag":34,"props":3656,"children":3657},{},[3658],{"type":38,"value":3659},"named agents or products",{"type":38,"value":3661},", not the whole company. It is valid ",{"type":29,"tag":34,"props":3663,"children":3664},{},[3665],{"type":38,"value":3666},"1 year",{"type":38,"value":3668},", with the standard version locked for that year. ",{"type":29,"tag":63,"props":3670,"children":3671},{},[3672],{"type":38,"value":67},{"type":29,"tag":136,"props":3674,"children":3675},{},[3676,3681,3682,3687,3689,3694,3696],{"type":29,"tag":34,"props":3677,"children":3678},{},[3679],{"type":38,"value":3680},"Auditors:",{"type":38,"value":354},{"type":29,"tag":34,"props":3683,"children":3684},{},[3685],{"type":38,"value":3686},"Schellman",{"type":38,"value":3688},", described as the first accredited AIUC-1 auditor (announced 3 Feb 2026; one guide says accreditation dates from 1 Nov 2025). ",{"type":29,"tag":34,"props":3690,"children":3691},{},[3692],{"type":38,"value":3693},"Coalfire",{"type":38,"value":3695}," is also named on aiuc-1.com. AIUC issues the certificate. ",{"type":29,"tag":63,"props":3697,"children":3698},{},[3699],{"type":38,"value":3700},"V\u002FS",{"type":29,"tag":136,"props":3702,"children":3703},{},[3704,3709,3711,3716,3718],{"type":29,"tag":34,"props":3705,"children":3706},{},[3707],{"type":38,"value":3708},"Certified (per aiuc-1.com, Oct 2026):",{"type":38,"value":3710}," Cursor, Fin (Intercom), ElevenLabs, Harvey, UiPath, KPMG (one of its products) and Sierra (17 Sep 2026). MSCI is listed as an ",{"type":29,"tag":101,"props":3712,"children":3713},{},[3714],{"type":38,"value":3715},"adopter",{"type":38,"value":3717},", not as certified. ",{"type":29,"tag":63,"props":3719,"children":3720},{},[3721],{"type":38,"value":67},{"type":29,"tag":136,"props":3723,"children":3724},{},[3725,3730,3732],{"type":29,"tag":34,"props":3726,"children":3727},{},[3728],{"type":38,"value":3729},"CSA STAR integration (30 Jun 2026):",{"type":38,"value":3731}," STAR Registry listings can carry the \"AIUC-1 AI Agent Trustmark\". ",{"type":29,"tag":63,"props":3733,"children":3734},{},[3735],{"type":38,"value":67},{"type":29,"tag":136,"props":3737,"children":3738},{},[3739,3741],{"type":38,"value":3740},"Insurance tie-in: AIUC's model links certification to underwriting of AI-agent liability. It is the only framework here built with an insurer's lens. ",{"type":29,"tag":63,"props":3742,"children":3743},{},[3744],{"type":38,"value":2758},{"type":29,"tag":290,"props":3746,"children":3748},{"id":3747},"b-native-structure-3",[3749],{"type":38,"value":423},{"type":29,"tag":297,"props":3751,"children":3752},{},[3753,3777,3782],{"type":29,"tag":136,"props":3754,"children":3755},{},[3756,3761,3763,3768,3770,3775],{"type":29,"tag":34,"props":3757,"children":3758},{},[3759],{"type":38,"value":3760},"Six domains",{"type":38,"value":3762},", each split into ",{"type":29,"tag":34,"props":3764,"children":3765},{},[3766],{"type":38,"value":3767},"requirements",{"type":38,"value":3769}," (ids such as A001), each split into ",{"type":29,"tag":34,"props":3771,"children":3772},{},[3773],{"type":38,"value":3774},"controls",{"type":38,"value":3776}," (ids such as D003.4).",{"type":29,"tag":136,"props":3778,"children":3779},{},[3780],{"type":38,"value":3781},"Requirements are Mandatory or Optional.",{"type":29,"tag":136,"props":3783,"children":3784},{},[3785],{"type":38,"value":3786},"Controls are tagged core or supplemental, and Q4-2026 added developer-vs-deployer guidance.",{"type":29,"tag":30,"props":3788,"children":3789},{},[3790,3792,3797],{"type":38,"value":3791},"The table below is the active requirement list as of Q4-2026 ",{"type":29,"tag":63,"props":3793,"children":3794},{},[3795],{"type":38,"value":3796},"V: standard.aiuc-1.com domain pages",{"type":38,"value":675},{"type":29,"tag":440,"props":3799,"children":3800},{},[3801,3817],{"type":29,"tag":444,"props":3802,"children":3803},{},[3804],{"type":29,"tag":448,"props":3805,"children":3806},{},[3807,3812],{"type":29,"tag":452,"props":3808,"children":3809},{},[3810],{"type":38,"value":3811},"Domain",{"type":29,"tag":452,"props":3813,"children":3814},{},[3815],{"type":38,"value":3816},"Requirements (M = mandatory, O = optional)",{"type":29,"tag":468,"props":3818,"children":3819},{},[3820,3838,3856,3874,3892,3910],{"type":29,"tag":448,"props":3821,"children":3822},{},[3823,3833],{"type":29,"tag":475,"props":3824,"children":3825},{},[3826,3831],{"type":29,"tag":34,"props":3827,"children":3828},{},[3829],{"type":38,"value":3830},"A. Data & Privacy",{"type":38,"value":3832}," (9)",{"type":29,"tag":475,"props":3834,"children":3835},{},[3836],{"type":38,"value":3837},"A001 Establish input data policy (M) · A002 Establish output data policy (M) · A003 Limit AI agent data access (M) · A004 Protect IP & trade secrets (M) · A005 Prevent cross-customer data exposure (M) · A006 Prevent PII leakage (M) · A007 Prevent IP violations (M) · A008 Prevent leakage of credentials and secrets (M) · A009 Third-party testing for data & privacy risk (M, new Q4-2026)",{"type":29,"tag":448,"props":3839,"children":3840},{},[3841,3851],{"type":29,"tag":475,"props":3842,"children":3843},{},[3844,3849],{"type":29,"tag":34,"props":3845,"children":3846},{},[3847],{"type":38,"value":3848},"B. Security",{"type":38,"value":3850}," (10)",{"type":29,"tag":475,"props":3852,"children":3853},{},[3854],{"type":38,"value":3855},"B001 Third-party testing for security risk (M) · B002 Detect adversarial input (O) · B003 Manage public release of technical details (O) · B004 Prevent AI endpoint scraping (M) · B005 Implement real-time input filtering (O) · B006 Prevent unauthorized AI agent actions (M) · B007 Enforce user access privileges to AI systems (M) · B008 Protect AI system deployment environment (M) · B009 Limit output over-exposure (M) · B010 Promote secure patterns in generated code (M)",{"type":29,"tag":448,"props":3857,"children":3858},{},[3859,3869],{"type":29,"tag":475,"props":3860,"children":3861},{},[3862,3867],{"type":29,"tag":34,"props":3863,"children":3864},{},[3865],{"type":38,"value":3866},"C. Safety",{"type":38,"value":3868}," (10 active)",{"type":29,"tag":475,"props":3870,"children":3871},{},[3872],{"type":38,"value":3873},"C001 Define AI risk taxonomy (M) · C002 Conduct pre-deployment testing (M) · C003 Prevent harmful outputs (M) · C004 Prevent out-of-scope outputs (M) · C005 Prevent agent-specific high risk outputs (M) · C006 Prevent output vulnerabilities (M) · C007 Flag high risk outputs for human review (O) · C008 Monitor AI risk categories (O) · C009 Enable real-time feedback and intervention (O) · C010 Third-party testing for safety risk (M). C011 and C012 retired in Q4-2026.",{"type":29,"tag":448,"props":3875,"children":3876},{},[3877,3887],{"type":29,"tag":475,"props":3878,"children":3879},{},[3880,3885],{"type":29,"tag":34,"props":3881,"children":3882},{},[3883],{"type":38,"value":3884},"D. Reliability",{"type":38,"value":3886}," (3 active)",{"type":29,"tag":475,"props":3888,"children":3889},{},[3890],{"type":38,"value":3891},"D001 Prevent hallucinated outputs (M) · D003 Restrict unsafe tool calls (M; D003.4 \"human approval for sensitive tool operations\" promoted to core in Q4-2026) · D004 Third-party testing for reliability risk (M). D002 retired.",{"type":29,"tag":448,"props":3893,"children":3894},{},[3895,3905],{"type":29,"tag":475,"props":3896,"children":3897},{},[3898,3903],{"type":29,"tag":34,"props":3899,"children":3900},{},[3901],{"type":38,"value":3902},"E. Accountability",{"type":38,"value":3904}," (16 active)",{"type":29,"tag":475,"props":3906,"children":3907},{},[3908],{"type":38,"value":3909},"E001 AI failure plan for security breaches · E002 AI failure plan for harmful outputs · E003 AI failure plan for hallucinations · E004 Assign accountability · E005 Document data storage security · E006 Conduct vendor and model due diligence (now explicitly covers model provenance) · E008 Review internal processes · E009 Monitor third-party access · E010 Establish AI acceptable use policy · E011 Record processing locations · E012 Document regulatory compliance · E013 Implement quality management system (O) · E015 Log AI system activity · E016 Implement AI disclosure mechanisms (5 disclosure controls merged into E016.1) · E017 Document system transparency policy (O) · E018 Third-party testing for accountability risk (M, new). E007 and E014 retired (merged into E004 and E017). All others M.",{"type":29,"tag":448,"props":3911,"children":3912},{},[3913,3923],{"type":29,"tag":475,"props":3914,"children":3915},{},[3916,3921],{"type":29,"tag":34,"props":3917,"children":3918},{},[3919],{"type":38,"value":3920},"F. Society",{"type":38,"value":3922}," (2)",{"type":29,"tag":475,"props":3924,"children":3925},{},[3926],{"type":38,"value":3927},"F001 Prevent AI cyber misuse (M) · F002 Prevent catastrophic misuse (M)",{"type":29,"tag":30,"props":3929,"children":3930},{},[3931,3933,3938,3940,3945,3947],{"type":38,"value":3932},"That makes ",{"type":29,"tag":34,"props":3934,"children":3935},{},[3936],{"type":38,"value":3937},"about 50 active requirements",{"type":38,"value":3939}," (my count from the domain pages; AIUC doesn't state a total). Q4-2026 also added ",{"type":29,"tag":34,"props":3941,"children":3942},{},[3943],{"type":38,"value":3944},"open-weight model controls",{"type":38,"value":3946},": source, integrity and licence verification, regression testing after fine-tuning or quantisation, and cyber-misuse capability assessment after modification. ",{"type":29,"tag":63,"props":3948,"children":3949},{},[3950],{"type":38,"value":67},{"type":29,"tag":290,"props":3952,"children":3954},{"id":3953},"c-who-asks-and-why-3",[3955],{"type":38,"value":843},{"type":29,"tag":297,"props":3957,"children":3958},{},[3959,3976,3986,3991],{"type":29,"tag":136,"props":3960,"children":3961},{},[3962,3967,3969,3974],{"type":29,"tag":34,"props":3963,"children":3964},{},[3965],{"type":38,"value":3966},"Enterprise buyers of AI agents",{"type":38,"value":3968}," (procurement and security due diligence) ask ",{"type":29,"tag":101,"props":3970,"children":3971},{},[3972],{"type":38,"value":3973},"vendors",{"type":38,"value":3975}," for it as the agent-specific complement to SOC 2.",{"type":29,"tag":136,"props":3977,"children":3978},{},[3979,3984],{"type":29,"tag":34,"props":3980,"children":3981},{},[3982],{"type":38,"value":3983},"Insurers and underwriters",{"type":38,"value":3985},", which is AIUC's thesis.",{"type":29,"tag":136,"props":3987,"children":3988},{},[3989],{"type":38,"value":3990},"The agent vendors themselves seek it as a sales accelerator.",{"type":29,"tag":136,"props":3992,"children":3993},{},[3994,3996,4001,4003,4008],{"type":38,"value":3995},"For a Qpoint ",{"type":29,"tag":101,"props":3997,"children":3998},{},[3999],{"type":38,"value":4000},"customer",{"type":38,"value":4002}," (an AI deployer), AIUC-1 is mostly ",{"type":29,"tag":34,"props":4004,"children":4005},{},[4006],{"type":38,"value":4007},"a thing they ask their AI vendors for",{"type":38,"value":4009},", not something they certify. The exception is customers who ship their own agents.",{"type":29,"tag":290,"props":4011,"children":4013},{"id":4012},"d-how-evidence-works-3",[4014],{"type":38,"value":877},{"type":29,"tag":297,"props":4016,"children":4017},{},[4018,4033,4044],{"type":29,"tag":136,"props":4019,"children":4020},{},[4021,4023,4028,4029],{"type":38,"value":4022},"Four steps: ",{"type":29,"tag":34,"props":4024,"children":4025},{},[4026],{"type":38,"value":4027},"scoping → AIUC technical evals (red-team) → accredited auditor reviews control evidence → AIUC certifies",{"type":38,"value":1545},{"type":29,"tag":63,"props":4030,"children":4031},{},[4032],{"type":38,"value":67},{"type":29,"tag":136,"props":4034,"children":4035},{},[4036,4038,4042],{"type":38,"value":4037},"Typical evidence: policies (ToS, privacy policy and DPA for A001 ",{"type":29,"tag":63,"props":4039,"children":4040},{},[4041],{"type":38,"value":77},{"type":38,"value":4043},"), configuration, logs, test reports, and quarterly re-test results.",{"type":29,"tag":136,"props":4045,"children":4046},{},[4047],{"type":38,"value":4048},"It is a hybrid of attestation-style audit and product testing.",{"type":29,"tag":290,"props":4050,"children":4052},{"id":4051},"e-what-qpoint-can-evidence-2",[4053],{"type":38,"value":896},{"type":29,"tag":30,"props":4055,"children":4056},{},[4057,4059,4064],{"type":38,"value":4058},"Two use-cases here: (i) a customer that builds or deploys an agent and seeks AIUC-1, and (ii) a customer using Qpoint data to ",{"type":29,"tag":101,"props":4060,"children":4061},{},[4062],{"type":38,"value":4063},"verify",{"type":38,"value":4065}," a certified vendor's claims in their environment.",{"type":29,"tag":440,"props":4067,"children":4068},{},[4069,4088],{"type":29,"tag":444,"props":4070,"children":4071},{},[4072],{"type":29,"tag":448,"props":4073,"children":4074},{},[4075,4080,4084],{"type":29,"tag":452,"props":4076,"children":4077},{},[4078],{"type":38,"value":4079},"Req",{"type":29,"tag":452,"props":4081,"children":4082},{},[4083],{"type":38,"value":915},{"type":29,"tag":452,"props":4085,"children":4086},{},[4087],{"type":38,"value":920},{"type":29,"tag":468,"props":4089,"children":4090},{},[4091,4123,4145,4167,4203,4225,4247,4269,4291,4313,4339,4361,4386,4408],{"type":29,"tag":448,"props":4092,"children":4093},{},[4094,4111,4118],{"type":29,"tag":475,"props":4095,"children":4096},{},[4097,4102,4104,4109],{"type":29,"tag":34,"props":4098,"children":4099},{},[4100],{"type":38,"value":4101},"A006",{"type":38,"value":4103}," Prevent PII leakage \u002F ",{"type":29,"tag":34,"props":4105,"children":4106},{},[4107],{"type":38,"value":4108},"A008",{"type":38,"value":4110}," Prevent leakage of credentials and secrets",{"type":29,"tag":475,"props":4112,"children":4113},{},[4114],{"type":29,"tag":34,"props":4115,"children":4116},{},[4117],{"type":38,"value":939},{"type":29,"tag":475,"props":4119,"children":4120},{},[4121],{"type":38,"value":4122},"Egress redaction of PII and secrets, with block events.",{"type":29,"tag":448,"props":4124,"children":4125},{},[4126,4136,4140],{"type":29,"tag":475,"props":4127,"children":4128},{},[4129,4134],{"type":29,"tag":34,"props":4130,"children":4131},{},[4132],{"type":38,"value":4133},"A003",{"type":38,"value":4135}," Limit AI agent data access",{"type":29,"tag":475,"props":4137,"children":4138},{},[4139],{"type":38,"value":1001},{"type":29,"tag":475,"props":4141,"children":4142},{},[4143],{"type":38,"value":4144},"Observe and restrict which data stores, APIs and MCP servers an agent reaches.",{"type":29,"tag":448,"props":4146,"children":4147},{},[4148,4158,4162],{"type":29,"tag":475,"props":4149,"children":4150},{},[4151,4156],{"type":29,"tag":34,"props":4152,"children":4153},{},[4154],{"type":38,"value":4155},"A004",{"type":38,"value":4157}," Protect IP & trade secrets",{"type":29,"tag":475,"props":4159,"children":4160},{},[4161],{"type":38,"value":1001},{"type":29,"tag":475,"props":4163,"children":4164},{},[4165],{"type":38,"value":4166},"Detect and redact source code or confidential data sent to providers.",{"type":29,"tag":448,"props":4168,"children":4169},{},[4170,4187,4191],{"type":29,"tag":475,"props":4171,"children":4172},{},[4173,4178,4180,4185],{"type":29,"tag":34,"props":4174,"children":4175},{},[4176],{"type":38,"value":4177},"B006",{"type":38,"value":4179}," Prevent unauthorized AI agent actions \u002F ",{"type":29,"tag":34,"props":4181,"children":4182},{},[4183],{"type":38,"value":4184},"D003",{"type":38,"value":4186}," Restrict unsafe tool calls",{"type":29,"tag":475,"props":4188,"children":4189},{},[4190],{"type":38,"value":960},{"type":29,"tag":475,"props":4192,"children":4193},{},[4194,4196,4201],{"type":38,"value":4195},"MCP server and method gating. A network deny is a hard control ",{"type":29,"tag":101,"props":4197,"children":4198},{},[4199],{"type":38,"value":4200},"outside",{"type":38,"value":4202}," the agent.",{"type":29,"tag":448,"props":4204,"children":4205},{},[4206,4216,4220],{"type":29,"tag":475,"props":4207,"children":4208},{},[4209,4214],{"type":29,"tag":34,"props":4210,"children":4211},{},[4212],{"type":38,"value":4213},"B005",{"type":38,"value":4215}," Real-time input filtering",{"type":29,"tag":475,"props":4217,"children":4218},{},[4219],{"type":38,"value":1001},{"type":29,"tag":475,"props":4221,"children":4222},{},[4223],{"type":38,"value":4224},"Inline redaction and filtering at the network layer.",{"type":29,"tag":448,"props":4226,"children":4227},{},[4228,4238,4242],{"type":29,"tag":475,"props":4229,"children":4230},{},[4231,4236],{"type":29,"tag":34,"props":4232,"children":4233},{},[4234],{"type":38,"value":4235},"B007",{"type":38,"value":4237}," Enforce user access privileges to AI systems",{"type":29,"tag":475,"props":4239,"children":4240},{},[4241],{"type":38,"value":1001},{"type":29,"tag":475,"props":4243,"children":4244},{},[4245],{"type":38,"value":4246},"Per-user and per-group allow-lists for providers and agents.",{"type":29,"tag":448,"props":4248,"children":4249},{},[4250,4260,4264],{"type":29,"tag":475,"props":4251,"children":4252},{},[4253,4258],{"type":29,"tag":34,"props":4254,"children":4255},{},[4256],{"type":38,"value":4257},"B008",{"type":38,"value":4259}," Protect deployment environment",{"type":29,"tag":475,"props":4261,"children":4262},{},[4263],{"type":38,"value":1001},{"type":29,"tag":475,"props":4265,"children":4266},{},[4267],{"type":38,"value":4268},"Endpoint and network posture of agent hosts.",{"type":29,"tag":448,"props":4270,"children":4271},{},[4272,4282,4286],{"type":29,"tag":475,"props":4273,"children":4274},{},[4275,4280],{"type":29,"tag":34,"props":4276,"children":4277},{},[4278],{"type":38,"value":4279},"E006",{"type":38,"value":4281}," Vendor and model due diligence",{"type":29,"tag":475,"props":4283,"children":4284},{},[4285],{"type":38,"value":1001},{"type":29,"tag":475,"props":4287,"children":4288},{},[4289],{"type":38,"value":4290},"Ground-truth inventory of models and providers actually used, including open-weight model downloads and serving if observable. Due-diligence documents live elsewhere.",{"type":29,"tag":448,"props":4292,"children":4293},{},[4294,4304,4308],{"type":29,"tag":475,"props":4295,"children":4296},{},[4297,4302],{"type":29,"tag":34,"props":4298,"children":4299},{},[4300],{"type":38,"value":4301},"E009",{"type":38,"value":4303}," Monitor third-party access",{"type":29,"tag":475,"props":4305,"children":4306},{},[4307],{"type":38,"value":960},{"type":29,"tag":475,"props":4309,"children":4310},{},[4311],{"type":38,"value":4312},"Third-party AI services and MCP servers touching org data.",{"type":29,"tag":448,"props":4314,"children":4315},{},[4316,4326,4334],{"type":29,"tag":475,"props":4317,"children":4318},{},[4319,4324],{"type":29,"tag":34,"props":4320,"children":4321},{},[4322],{"type":38,"value":4323},"E010",{"type":38,"value":4325}," Establish AI acceptable use policy",{"type":29,"tag":475,"props":4327,"children":4328},{},[4329],{"type":29,"tag":34,"props":4330,"children":4331},{},[4332],{"type":38,"value":4333},"Strong (operation)",{"type":29,"tag":475,"props":4335,"children":4336},{},[4337],{"type":38,"value":4338},"The policy document is the customer's. Qpoint proves enforcement.",{"type":29,"tag":448,"props":4340,"children":4341},{},[4342,4352,4356],{"type":29,"tag":475,"props":4343,"children":4344},{},[4345,4350],{"type":29,"tag":34,"props":4346,"children":4347},{},[4348],{"type":38,"value":4349},"E011",{"type":38,"value":4351}," Record processing locations",{"type":29,"tag":475,"props":4353,"children":4354},{},[4355],{"type":38,"value":960},{"type":29,"tag":475,"props":4357,"children":4358},{},[4359],{"type":38,"value":4360},"Provider endpoints and regions observed per flow.",{"type":29,"tag":448,"props":4362,"children":4363},{},[4364,4374,4381],{"type":29,"tag":475,"props":4365,"children":4366},{},[4367,4372],{"type":29,"tag":34,"props":4368,"children":4369},{},[4370],{"type":38,"value":4371},"E015",{"type":38,"value":4373}," Log AI system activity",{"type":29,"tag":475,"props":4375,"children":4376},{},[4377],{"type":29,"tag":34,"props":4378,"children":4379},{},[4380],{"type":38,"value":939},{"type":29,"tag":475,"props":4382,"children":4383},{},[4384],{"type":38,"value":4385},"Network-level AI activity logs: who, what tool, which provider, data classes.",{"type":29,"tag":448,"props":4387,"children":4388},{},[4389,4399,4403],{"type":29,"tag":475,"props":4390,"children":4391},{},[4392,4397],{"type":29,"tag":34,"props":4393,"children":4394},{},[4395],{"type":38,"value":4396},"F001",{"type":38,"value":4398}," Prevent AI cyber misuse",{"type":29,"tag":475,"props":4400,"children":4401},{},[4402],{"type":38,"value":1063},{"type":29,"tag":475,"props":4404,"children":4405},{},[4406],{"type":38,"value":4407},"Detect agent behaviour resembling scanning or exfiltration.",{"type":29,"tag":448,"props":4409,"children":4410},{},[4411,4419,4426],{"type":29,"tag":475,"props":4412,"children":4413},{},[4414],{"type":29,"tag":34,"props":4415,"children":4416},{},[4417],{"type":38,"value":4418},"C-series, D001, A005, B001\u002FA009\u002FC010\u002FD004\u002FE018 third-party testing, E001–E004, E012–E017",{"type":29,"tag":475,"props":4420,"children":4421},{},[4422],{"type":29,"tag":34,"props":4423,"children":4424},{},[4425],{"type":38,"value":1247},{"type":29,"tag":475,"props":4427,"children":4428},{},[4429],{"type":38,"value":4430},"Output safety, hallucination, red-teaming, failure plans, QMS, disclosures.",{"type":29,"tag":30,"props":4432,"children":4433},{},[4434,4438],{"type":29,"tag":34,"props":4435,"children":4436},{},[4437],{"type":38,"value":1260},{"type":38,"value":4439}," model behaviour testing (AIUC's own evals), output content safety and failure-plan documentation.",{"type":29,"tag":290,"props":4441,"children":4443},{"id":4442},"f-crosswalks-14-official-on-standardaiuc-1comcrosswalks",[4444],{"type":38,"value":4445},"(f) Crosswalks (14, official, on standard.aiuc-1.com\u002Fcrosswalks)",{"type":29,"tag":297,"props":4447,"children":4448},{},[4449,4478],{"type":29,"tag":136,"props":4450,"children":4451},{},[4452,4454,4458,4460,4465,4467,4472,4474],{"type":38,"value":4453},"EU AI Act (article level), NIST AI RMF (function level), ISO 42001 (clause level), MITRE ATLAS (mitigation level), ",{"type":29,"tag":34,"props":4455,"children":4456},{},[4457],{"type":38,"value":2491},{"type":38,"value":4459}," (control level), OWASP LLM Top 10 and ",{"type":29,"tag":34,"props":4461,"children":4462},{},[4463],{"type":38,"value":4464},"OWASP Agentic Top 10",{"type":38,"value":4466}," (threat level), OWASP AIVSS, IBM AI Risk Atlas, Cisco AI Security & Safety Framework, NYC LL144, Colorado AI Act, California SB 53, and ",{"type":29,"tag":34,"props":4468,"children":4469},{},[4470],{"type":38,"value":4471},"SOC 2",{"type":38,"value":4473}," (criteria level). ",{"type":29,"tag":63,"props":4475,"children":4476},{},[4477],{"type":38,"value":67},{"type":29,"tag":136,"props":4479,"children":4480},{},[4481,4483,4488,4489],{"type":38,"value":4482},"In the other direction, CSA's AICM v1.1 includes an ",{"type":29,"tag":34,"props":4484,"children":4485},{},[4486],{"type":38,"value":4487},"AICM→AIUC-1 mapping",{"type":38,"value":1545},{"type":29,"tag":63,"props":4490,"children":4491},{},[4492],{"type":38,"value":67},{"type":29,"tag":30,"props":4494,"children":4495},{},[4496,4500,4501,4507,4508,4514,4515,4521,4522,4528,4529,4535,4536,4542,4543,4549,4550,4556,4557,4563,4564,4570,4571,4577,4578,4584,4585],{"type":29,"tag":34,"props":4497,"children":4498},{},[4499],{"type":38,"value":1351},{"type":38,"value":354},{"type":29,"tag":1354,"props":4502,"children":4505},{"href":4503,"rel":4504},"https:\u002F\u002Fwww.aiuc-1.com\u002F",[1358],[4506],{"type":38,"value":4503},{"type":38,"value":1362},{"type":29,"tag":1354,"props":4509,"children":4512},{"href":4510,"rel":4511},"https:\u002F\u002Fstandard.aiuc-1.com\u002F",[1358],[4513],{"type":38,"value":4510},{"type":38,"value":1362},{"type":29,"tag":1354,"props":4516,"children":4519},{"href":4517,"rel":4518},"https:\u002F\u002Fstandard.aiuc-1.com\u002Fdata-and-privacy\u002F",[1358],[4520],{"type":38,"value":4517},{"type":38,"value":1362},{"type":29,"tag":1354,"props":4523,"children":4526},{"href":4524,"rel":4525},"https:\u002F\u002Fstandard.aiuc-1.com\u002Fsecurity\u002F",[1358],[4527],{"type":38,"value":4524},{"type":38,"value":1362},{"type":29,"tag":1354,"props":4530,"children":4533},{"href":4531,"rel":4532},"https:\u002F\u002Fstandard.aiuc-1.com\u002Fsafety\u002F",[1358],[4534],{"type":38,"value":4531},{"type":38,"value":1362},{"type":29,"tag":1354,"props":4537,"children":4540},{"href":4538,"rel":4539},"https:\u002F\u002Fstandard.aiuc-1.com\u002Freliability\u002F",[1358],[4541],{"type":38,"value":4538},{"type":38,"value":1362},{"type":29,"tag":1354,"props":4544,"children":4547},{"href":4545,"rel":4546},"https:\u002F\u002Fstandard.aiuc-1.com\u002Faccountability\u002F",[1358],[4548],{"type":38,"value":4545},{"type":38,"value":1362},{"type":29,"tag":1354,"props":4551,"children":4554},{"href":4552,"rel":4553},"https:\u002F\u002Fstandard.aiuc-1.com\u002Fsociety\u002F",[1358],[4555],{"type":38,"value":4552},{"type":38,"value":1362},{"type":29,"tag":1354,"props":4558,"children":4561},{"href":4559,"rel":4560},"https:\u002F\u002Fstandard.aiuc-1.com\u002Fchangelog.md",[1358],[4562],{"type":38,"value":4559},{"type":38,"value":1362},{"type":29,"tag":1354,"props":4565,"children":4568},{"href":4566,"rel":4567},"https:\u002F\u002Fstandard.aiuc-1.com\u002Fcrosswalks\u002Findex",[1358],[4569],{"type":38,"value":4566},{"type":38,"value":1362},{"type":29,"tag":1354,"props":4572,"children":4575},{"href":4573,"rel":4574},"https:\u002F\u002Fwww.schellman.com\u002Fblog\u002Fnews\u002Fschellman-becomes-the-first-accredited-auditor-for-aiuc-1",[1358],[4576],{"type":38,"value":4573},{"type":38,"value":1362},{"type":29,"tag":1354,"props":4579,"children":4582},{"href":4580,"rel":4581},"https:\u002F\u002Fcloudsecurityalliance.org\u002Fpress-releases\u002F2026\u002F06\u002F30\u002Fcsa-extends-leadership-into-agentic-ai-with-addition-of-aiuc-1-certification-to-star-registry",[1358],[4583],{"type":38,"value":4580},{"type":38,"value":1362},{"type":29,"tag":1354,"props":4586,"children":4589},{"href":4587,"rel":4588},"https:\u002F\u002Fhelp.drata.com\u002Fen\u002Farticles\u002F17312936-aiuc-1-version-updates-which-version-you-ll-see-and-when",[1358],[4590],{"type":38,"value":4587},{"type":29,"tag":280,"props":4592,"children":4593},{},[],{"type":29,"tag":284,"props":4595,"children":4597},{"id":4596},"_5-csa-ai-controls-matrix-aicm-and-star-for-ai",[4598],{"type":38,"value":17},{"type":29,"tag":290,"props":4600,"children":4602},{"id":4601},"a-identity-and-status-4",[4603],{"type":38,"value":295},{"type":29,"tag":297,"props":4605,"children":4606},{},[4607,4616,4626,4653,4668],{"type":29,"tag":136,"props":4608,"children":4609},{},[4610,4614],{"type":29,"tag":34,"props":4611,"children":4612},{},[4613],{"type":38,"value":307},{"type":38,"value":4615}," Cloud Security Alliance.",{"type":29,"tag":136,"props":4617,"children":4618},{},[4619,4624],{"type":29,"tag":34,"props":4620,"children":4621},{},[4622],{"type":38,"value":4623},"AICM v1.0:",{"type":38,"value":4625}," released 9 Jul 2025, updated 30 Oct 2025, with 243 control objectives.",{"type":29,"tag":136,"props":4627,"children":4628},{},[4629,4634,4636,4641,4643,4648,4649],{"type":29,"tag":34,"props":4630,"children":4631},{},[4632],{"type":38,"value":4633},"AICM v1.1 is current.",{"type":38,"value":4635}," The artifact page gives 22 Jun 2026 and the CSA blog is dated 14 Jul 2026. It has ",{"type":29,"tag":34,"props":4637,"children":4638},{},[4639],{"type":38,"value":4640},"247 control objectives across 18 domains",{"type":38,"value":4642},", synced to CCM v4.1, and the ",{"type":29,"tag":34,"props":4644,"children":4645},{},[4646],{"type":38,"value":4647},"AI-CAIQ grew to 320 questions",{"type":38,"value":1545},{"type":29,"tag":63,"props":4650,"children":4651},{},[4652],{"type":38,"value":67},{"type":29,"tag":136,"props":4654,"children":4655},{},[4656,4660,4661,4666],{"type":29,"tag":34,"props":4657,"children":4658},{},[4659],{"type":38,"value":380},{"type":38,"value":382},{"type":29,"tag":34,"props":4662,"children":4663},{},[4664],{"type":38,"value":4665},"controls matrix",{"type":38,"value":4667},", a superset of the Cloud Controls Matrix (CCM). Assessment runs through STAR for AI.",{"type":29,"tag":136,"props":4669,"children":4670},{},[4671,4676,4677,4681,4682],{"type":29,"tag":34,"props":4672,"children":4673},{},[4674],{"type":38,"value":4675},"STAR for AI",{"type":38,"value":354},{"type":29,"tag":63,"props":4678,"children":4679},{},[4680],{"type":38,"value":67},{"type":38,"value":2995},{"type":29,"tag":297,"props":4683,"children":4684},{},[4685,4695,4705,4741,4746],{"type":29,"tag":136,"props":4686,"children":4687},{},[4688,4693],{"type":29,"tag":34,"props":4689,"children":4690},{},[4691],{"type":38,"value":4692},"Level 1, self-assessment (a1):",{"type":38,"value":4694}," submit an AI-CAIQ to the STAR Registry.",{"type":29,"tag":136,"props":4696,"children":4697},{},[4698,4703],{"type":29,"tag":34,"props":4699,"children":4700},{},[4701],{"type":38,"value":4702},"Level 1, Valid-AI-ted (a2):",{"type":38,"value":4704}," automated AI scoring of the AI-CAIQ, giving a badge.",{"type":29,"tag":136,"props":4706,"children":4707},{},[4708,4713,4715,4720,4722,4727,4728,4733,4735,4740],{"type":29,"tag":34,"props":4709,"children":4710},{},[4711],{"type":38,"value":4712},"Level 2, launched 20 Nov 2025:",{"type":38,"value":4714}," requires a Valid-AI-ted AI-CAIQ plus a third-party route. The routes are ",{"type":29,"tag":34,"props":4716,"children":4717},{},[4718],{"type":38,"value":4719},"ISO 27001 + AICM (a3)",{"type":38,"value":4721},", ",{"type":29,"tag":34,"props":4723,"children":4724},{},[4725],{"type":38,"value":4726},"27001 + 42001 + AICM (a4)",{"type":38,"value":4721},{"type":29,"tag":34,"props":4729,"children":4730},{},[4731],{"type":38,"value":4732},"42001 + AICM (a5)",{"type":38,"value":4734}," or ",{"type":29,"tag":34,"props":4736,"children":4737},{},[4738],{"type":38,"value":4739},"SOC 2 + AICM attestation (a6)",{"type":38,"value":120},{"type":29,"tag":136,"props":4742,"children":4743},{},[4744],{"type":38,"value":4745},"First Level 2 holders were Microsoft and Zendesk. Oracle SaaS is listed from Jan 2026.",{"type":29,"tag":136,"props":4747,"children":4748},{},[4749],{"type":38,"value":4750},"STAR also displays the AIUC-1 trustmark (Jun 2026).",{"type":29,"tag":290,"props":4752,"children":4754},{"id":4753},"b-native-structure-4",[4755],{"type":38,"value":423},{"type":29,"tag":30,"props":4757,"children":4758},{},[4759,4760,4765],{"type":38,"value":2739},{"type":29,"tag":34,"props":4761,"children":4762},{},[4763],{"type":38,"value":4764},"control objective",{"type":38,"value":4766}," (for example AIS-15). Each one carries:",{"type":29,"tag":297,"props":4768,"children":4769},{},[4770,4781,4805,4810,4815],{"type":29,"tag":136,"props":4771,"children":4772},{},[4773,4775,4779],{"type":38,"value":4774},"control type (AI-specific, AI-related or cloud-only; v1.0 split them roughly 37 \u002F 183 \u002F 22 ",{"type":29,"tag":63,"props":4776,"children":4777},{},[4778],{"type":38,"value":77},{"type":38,"value":4780},"),",{"type":29,"tag":136,"props":4782,"children":4783},{},[4784,4786,4791,4793,4798,4799,4803],{"type":38,"value":4785},"applicability and ownership across the ",{"type":29,"tag":34,"props":4787,"children":4788},{},[4789],{"type":38,"value":4790},"shared-responsibility roles",{"type":38,"value":4792},": ",{"type":29,"tag":34,"props":4794,"children":4795},{},[4796],{"type":38,"value":4797},"Model Provider (MP), Orchestrated Service Provider (OSP), Application Provider (AP), AI Customer (AIC), Cloud Service Provider (CSP)",{"type":38,"value":354},{"type":29,"tag":63,"props":4800,"children":4801},{},[4802],{"type":38,"value":67},{"type":38,"value":4804},",",{"type":29,"tag":136,"props":4806,"children":4807},{},[4808],{"type":38,"value":4809},"architectural relevance,",{"type":29,"tag":136,"props":4811,"children":4812},{},[4813],{"type":38,"value":4814},"LLM lifecycle relevance,",{"type":29,"tag":136,"props":4816,"children":4817},{},[4818],{"type":38,"value":4819},"threat category.",{"type":29,"tag":30,"props":4821,"children":4822},{},[4823,4825],{"type":38,"value":4824},"Each role has its own implementation and auditing guidelines. ",{"type":29,"tag":63,"props":4826,"children":4827},{},[4828],{"type":38,"value":67},{"type":29,"tag":30,"props":4830,"children":4831},{},[4832,4837,4839,4843,4845,4849,4851,4855],{"type":29,"tag":34,"props":4833,"children":4834},{},[4835],{"type":38,"value":4836},"The 18 domains.",{"type":38,"value":4838}," These are the 17 CCM v4 domains plus Model Security. The names come from CCM v4 lineage ",{"type":29,"tag":63,"props":4840,"children":4841},{},[4842],{"type":38,"value":87},{"type":38,"value":4844},". Multiple sources confirm Model Security, Universal Endpoint Management, Logging and Monitoring, and Interoperability & Portability as AICM domains ",{"type":29,"tag":63,"props":4846,"children":4847},{},[4848],{"type":38,"value":77},{"type":38,"value":4850},", and v1.1 renamed IVS to Infrastructure Security (I&S) ",{"type":29,"tag":63,"props":4852,"children":4853},{},[4854],{"type":38,"value":67},{"type":38,"value":120},{"type":29,"tag":440,"props":4857,"children":4858},{},[4859,4874],{"type":29,"tag":444,"props":4860,"children":4861},{},[4862],{"type":29,"tag":448,"props":4863,"children":4864},{},[4865,4868,4871],{"type":29,"tag":452,"props":4866,"children":4867},{},[],{"type":29,"tag":452,"props":4869,"children":4870},{},[],{"type":29,"tag":452,"props":4872,"children":4873},{},[],{"type":29,"tag":468,"props":4875,"children":4876},{},[4877,4895,4913,4931,4949,4972],{"type":29,"tag":448,"props":4878,"children":4879},{},[4880,4885,4890],{"type":29,"tag":475,"props":4881,"children":4882},{},[4883],{"type":38,"value":4884},"A&A Audit & Assurance",{"type":29,"tag":475,"props":4886,"children":4887},{},[4888],{"type":38,"value":4889},"AIS Application & Interface Security",{"type":29,"tag":475,"props":4891,"children":4892},{},[4893],{"type":38,"value":4894},"BCR Business Continuity Mgmt & Operational Resilience",{"type":29,"tag":448,"props":4896,"children":4897},{},[4898,4903,4908],{"type":29,"tag":475,"props":4899,"children":4900},{},[4901],{"type":38,"value":4902},"CCC Change Control & Configuration Mgmt",{"type":29,"tag":475,"props":4904,"children":4905},{},[4906],{"type":38,"value":4907},"CEK Cryptography, Encryption & Key Mgmt",{"type":29,"tag":475,"props":4909,"children":4910},{},[4911],{"type":38,"value":4912},"DCS Datacenter Security",{"type":29,"tag":448,"props":4914,"children":4915},{},[4916,4921,4926],{"type":29,"tag":475,"props":4917,"children":4918},{},[4919],{"type":38,"value":4920},"DSP Data Security & Privacy Lifecycle Mgmt",{"type":29,"tag":475,"props":4922,"children":4923},{},[4924],{"type":38,"value":4925},"GRC Governance, Risk & Compliance",{"type":29,"tag":475,"props":4927,"children":4928},{},[4929],{"type":38,"value":4930},"HRS Human Resources",{"type":29,"tag":448,"props":4932,"children":4933},{},[4934,4939,4944],{"type":29,"tag":475,"props":4935,"children":4936},{},[4937],{"type":38,"value":4938},"IAM Identity & Access Mgmt",{"type":29,"tag":475,"props":4940,"children":4941},{},[4942],{"type":38,"value":4943},"IPY Interoperability & Portability",{"type":29,"tag":475,"props":4945,"children":4946},{},[4947],{"type":38,"value":4948},"I&S Infrastructure Security (was IVS)",{"type":29,"tag":448,"props":4950,"children":4951},{},[4952,4957,4967],{"type":29,"tag":475,"props":4953,"children":4954},{},[4955],{"type":38,"value":4956},"LOG Logging & Monitoring",{"type":29,"tag":475,"props":4958,"children":4959},{},[4960,4965],{"type":29,"tag":34,"props":4961,"children":4962},{},[4963],{"type":38,"value":4964},"MDS Model Security",{"type":38,"value":4966}," (13 controls, AI-specific, since v1.0)",{"type":29,"tag":475,"props":4968,"children":4969},{},[4970],{"type":38,"value":4971},"SEF Security Incident Mgmt, E-Discovery & Cloud Forensics",{"type":29,"tag":448,"props":4973,"children":4974},{},[4975,4980,4985],{"type":29,"tag":475,"props":4976,"children":4977},{},[4978],{"type":38,"value":4979},"STA Supply Chain Mgmt, Transparency & Accountability",{"type":29,"tag":475,"props":4981,"children":4982},{},[4983],{"type":38,"value":4984},"TVM Threat & Vulnerability Mgmt",{"type":29,"tag":475,"props":4986,"children":4987},{},[4988],{"type":38,"value":4989},"UEM Universal Endpoint Management",{"type":29,"tag":30,"props":4991,"children":4992},{},[4993,4995,5000,5002,5007,5009,5014,5016,5021,5023,5028,5030],{"type":38,"value":4994},"AI-specific controls named by CSA include ",{"type":29,"tag":34,"props":4996,"children":4997},{},[4998],{"type":38,"value":4999},"AIS-15",{"type":38,"value":5001}," (prompt injection), ",{"type":29,"tag":34,"props":5003,"children":5004},{},[5005],{"type":38,"value":5006},"MDS-13",{"type":38,"value":5008}," (secure model serialization), ",{"type":29,"tag":34,"props":5010,"children":5011},{},[5012],{"type":38,"value":5013},"DSP-24",{"type":38,"value":5015}," (training-data relevance), ",{"type":29,"tag":34,"props":5017,"children":5018},{},[5019],{"type":38,"value":5020},"SEF-04",{"type":38,"value":5022}," (AI incident-response testing) and ",{"type":29,"tag":34,"props":5024,"children":5025},{},[5026],{"type":38,"value":5027},"STA-09",{"type":38,"value":5029}," (service bill of materials). ",{"type":29,"tag":63,"props":5031,"children":5032},{},[5033],{"type":38,"value":67},{"type":29,"tag":290,"props":5035,"children":5037},{"id":5036},"c-who-asks-and-why-4",[5038],{"type":38,"value":843},{"type":29,"tag":297,"props":5040,"children":5041},{},[5042,5052,5057,5062],{"type":29,"tag":136,"props":5043,"children":5044},{},[5045,5050],{"type":29,"tag":34,"props":5046,"children":5047},{},[5048],{"type":38,"value":5049},"Cloud and AI buyers' vendor-risk teams.",{"type":38,"value":5051}," The AI-CAIQ is the AI equivalent of the CAIQ questionnaire that many enterprises already accept.",{"type":29,"tag":136,"props":5053,"children":5054},{},[5055],{"type":38,"value":5056},"Regulated industries wanting one matrix that maps to ISO 42001, the EU AI Act and NIST.",{"type":29,"tag":136,"props":5058,"children":5059},{},[5060],{"type":38,"value":5061},"Vendors seeking a STAR for AI listing as a market signal.",{"type":29,"tag":136,"props":5063,"children":5064},{},[5065,5066,5071],{"type":38,"value":646},{"type":29,"tag":34,"props":5067,"children":5068},{},[5069],{"type":38,"value":5070},"shared-responsibility tagging",{"type":38,"value":5072}," is what makes AICM useful for Qpoint's customers: they are \"AI Customers\" (AIC) and sometimes \"Application Providers\" (AP).",{"type":29,"tag":290,"props":5074,"children":5076},{"id":5075},"d-how-evidence-works-4",[5077],{"type":38,"value":877},{"type":29,"tag":297,"props":5079,"children":5080},{},[5081,5091,5101],{"type":29,"tag":136,"props":5082,"children":5083},{},[5084,5089],{"type":29,"tag":34,"props":5085,"children":5086},{},[5087],{"type":38,"value":5088},"Level 1",{"type":38,"value":5090}," is self-attestation (AI-CAIQ answers, optionally scored by Valid-AI-ted).",{"type":29,"tag":136,"props":5092,"children":5093},{},[5094,5099],{"type":29,"tag":34,"props":5095,"children":5096},{},[5097],{"type":38,"value":5098},"Level 2",{"type":38,"value":5100}," is a third-party ISO certification audit by an accredited certification body with AICM in scope, or a CPA SOC 2 attestation with AICM criteria added (CSA guidelines for CPAs, Mar 2026).",{"type":29,"tag":136,"props":5102,"children":5103},{},[5104,5106,5111],{"type":38,"value":5105},"Auditors use the per-role ",{"type":29,"tag":34,"props":5107,"children":5108},{},[5109],{"type":38,"value":5110},"auditing guidelines",{"type":38,"value":120},{"type":29,"tag":290,"props":5113,"children":5115},{"id":5114},"e-what-qpoint-can-evidence-ccm-lineage-ids-check-exact-numbering-against-the-v11-spreadsheet-unverified-at-id-level",[5116,5118,5126],{"type":38,"value":5117},"(e) What Qpoint can evidence (CCM-lineage IDs; check exact numbering against the v1.1 spreadsheet, ",{"type":29,"tag":34,"props":5119,"children":5120},{},[5121],{"type":29,"tag":63,"props":5122,"children":5123},{},[5124],{"type":38,"value":5125},"UNVERIFIED at ID level",{"type":38,"value":5127},")",{"type":29,"tag":440,"props":5129,"children":5130},{},[5131,5150],{"type":29,"tag":444,"props":5132,"children":5133},{},[5134],{"type":29,"tag":448,"props":5135,"children":5136},{},[5137,5142,5146],{"type":29,"tag":452,"props":5138,"children":5139},{},[5140],{"type":38,"value":5141},"Control",{"type":29,"tag":452,"props":5143,"children":5144},{},[5145],{"type":38,"value":915},{"type":29,"tag":452,"props":5147,"children":5148},{},[5149],{"type":38,"value":920},{"type":29,"tag":468,"props":5151,"children":5152},{},[5153,5178,5203,5228,5250,5270,5290,5310,5330,5352,5372],{"type":29,"tag":448,"props":5154,"children":5155},{},[5156,5166,5173],{"type":29,"tag":475,"props":5157,"children":5158},{},[5159,5164],{"type":29,"tag":34,"props":5160,"children":5161},{},[5162],{"type":38,"value":5163},"UEM",{"type":38,"value":5165}," (UEM-02 application and service approval, UEM-04 endpoint inventory, UEM-11 data loss prevention)",{"type":29,"tag":475,"props":5167,"children":5168},{},[5169],{"type":29,"tag":34,"props":5170,"children":5171},{},[5172],{"type":38,"value":939},{"type":29,"tag":475,"props":5174,"children":5175},{},[5176],{"type":38,"value":5177},"Approved AI apps, agents and MCP servers per endpoint; DLP via redaction.",{"type":29,"tag":448,"props":5179,"children":5180},{},[5181,5191,5198],{"type":29,"tag":475,"props":5182,"children":5183},{},[5184,5189],{"type":29,"tag":34,"props":5185,"children":5186},{},[5187],{"type":38,"value":5188},"DSP",{"type":38,"value":5190}," (DSP-03 data inventory, DSP-05 data flow documentation; plus sensitive-data protection)",{"type":29,"tag":475,"props":5192,"children":5193},{},[5194],{"type":29,"tag":34,"props":5195,"children":5196},{},[5197],{"type":38,"value":939},{"type":29,"tag":475,"props":5199,"children":5200},{},[5201],{"type":38,"value":5202},"Live AI data-flow maps by data class and provider.",{"type":29,"tag":448,"props":5204,"children":5205},{},[5206,5216,5223],{"type":29,"tag":475,"props":5207,"children":5208},{},[5209,5214],{"type":29,"tag":34,"props":5210,"children":5211},{},[5212],{"type":38,"value":5213},"LOG",{"type":38,"value":5215}," (LOG-03 security monitoring and alerting; log records and protection)",{"type":29,"tag":475,"props":5217,"children":5218},{},[5219],{"type":29,"tag":34,"props":5220,"children":5221},{},[5222],{"type":38,"value":939},{"type":29,"tag":475,"props":5224,"children":5225},{},[5226],{"type":38,"value":5227},"AI activity logs and alerts.",{"type":29,"tag":448,"props":5229,"children":5230},{},[5231,5241,5245],{"type":29,"tag":475,"props":5232,"children":5233},{},[5234,5239],{"type":29,"tag":34,"props":5235,"children":5236},{},[5237],{"type":38,"value":5238},"STA",{"type":38,"value":5240}," (STA-07 supply chain inventory, STA-08 supply-chain risk management, STA-09 service BOM)",{"type":29,"tag":475,"props":5242,"children":5243},{},[5244],{"type":38,"value":960},{"type":29,"tag":475,"props":5246,"children":5247},{},[5248],{"type":38,"value":5249},"AI supply-chain inventory (providers, models, MCP servers) usable as an AI\u002Fagent BOM.",{"type":29,"tag":448,"props":5251,"children":5252},{},[5253,5261,5265],{"type":29,"tag":475,"props":5254,"children":5255},{},[5256],{"type":29,"tag":34,"props":5257,"children":5258},{},[5259],{"type":38,"value":5260},"IAM",{"type":29,"tag":475,"props":5262,"children":5263},{},[5264],{"type":38,"value":1001},{"type":29,"tag":475,"props":5266,"children":5267},{},[5268],{"type":38,"value":5269},"User and agent attribution; per-identity allow-lists.",{"type":29,"tag":448,"props":5271,"children":5272},{},[5273,5281,5285],{"type":29,"tag":475,"props":5274,"children":5275},{},[5276],{"type":29,"tag":34,"props":5277,"children":5278},{},[5279],{"type":38,"value":5280},"GRC",{"type":29,"tag":475,"props":5282,"children":5283},{},[5284],{"type":38,"value":1001},{"type":29,"tag":475,"props":5286,"children":5287},{},[5288],{"type":38,"value":5289},"Policy enforcement as operating evidence.",{"type":29,"tag":448,"props":5291,"children":5292},{},[5293,5301,5305],{"type":29,"tag":475,"props":5294,"children":5295},{},[5296],{"type":29,"tag":34,"props":5297,"children":5298},{},[5299],{"type":38,"value":5300},"TVM",{"type":29,"tag":475,"props":5302,"children":5303},{},[5304],{"type":38,"value":1001},{"type":29,"tag":475,"props":5306,"children":5307},{},[5308],{"type":38,"value":5309},"Detect vulnerable or unapproved agent and tool versions.",{"type":29,"tag":448,"props":5311,"children":5312},{},[5313,5321,5325],{"type":29,"tag":475,"props":5314,"children":5315},{},[5316],{"type":29,"tag":34,"props":5317,"children":5318},{},[5319],{"type":38,"value":5320},"SEF",{"type":29,"tag":475,"props":5322,"children":5323},{},[5324],{"type":38,"value":1001},{"type":29,"tag":475,"props":5326,"children":5327},{},[5328],{"type":38,"value":5329},"AI incident detection inputs.",{"type":29,"tag":448,"props":5331,"children":5332},{},[5333,5342,5347],{"type":29,"tag":475,"props":5334,"children":5335},{},[5336,5340],{"type":29,"tag":34,"props":5337,"children":5338},{},[5339],{"type":38,"value":4999},{"type":38,"value":5341}," prompt injection",{"type":29,"tag":475,"props":5343,"children":5344},{},[5345],{"type":38,"value":5346},"Weak\u002Fpartial",{"type":29,"tag":475,"props":5348,"children":5349},{},[5350],{"type":38,"value":5351},"Detection only.",{"type":29,"tag":448,"props":5353,"children":5354},{},[5355,5363,5367],{"type":29,"tag":475,"props":5356,"children":5357},{},[5358],{"type":29,"tag":34,"props":5359,"children":5360},{},[5361],{"type":38,"value":5362},"MDS",{"type":29,"tag":475,"props":5364,"children":5365},{},[5366],{"type":38,"value":1247},{"type":29,"tag":475,"props":5368,"children":5369},{},[5370],{"type":38,"value":5371},"Model Provider controls: training, serialization, weights security.",{"type":29,"tag":448,"props":5373,"children":5374},{},[5375,5383,5387],{"type":29,"tag":475,"props":5376,"children":5377},{},[5378],{"type":29,"tag":34,"props":5379,"children":5380},{},[5381],{"type":38,"value":5382},"DCS, HRS, BCR, CEK",{"type":29,"tag":475,"props":5384,"children":5385},{},[5386],{"type":38,"value":1247},{"type":29,"tag":475,"props":5388,"children":5389},{},[5390],{"type":38,"value":5391},"Outside network observation.",{"type":29,"tag":30,"props":5393,"children":5394},{},[5395,5399],{"type":29,"tag":34,"props":5396,"children":5397},{},[5398],{"type":38,"value":1260},{"type":38,"value":5400}," Model Provider-owned controls (most of MDS, training-data DSP-24), datacenter and HR controls.",{"type":29,"tag":290,"props":5402,"children":5404},{"id":5403},"f-crosswalks-official-downloads",[5405],{"type":38,"value":5406},"(f) Crosswalks (official downloads)",{"type":29,"tag":297,"props":5408,"children":5409},{},[5410,5424],{"type":29,"tag":136,"props":5411,"children":5412},{},[5413,5418,5420],{"type":29,"tag":34,"props":5414,"children":5415},{},[5416],{"type":38,"value":5417},"ISO\u002FIEC 42001:2023, BSI AIC4, NIST AI 600-1 (and AI RMF), the EU AI Act, and AIUC-1 (new in v1.1)",{"type":38,"value":5419},", each with gap analysis. ISO 27001 is named as mapped. ",{"type":29,"tag":63,"props":5421,"children":5422},{},[5423],{"type":38,"value":67},{"type":29,"tag":136,"props":5425,"children":5426},{},[5427,5429],{"type":38,"value":5428},"CCM v4.1 itself maps to ISO 27001\u002F27002\u002F27017\u002F27018, NIST 800-53, PCI DSS, CIS and others. ",{"type":29,"tag":63,"props":5430,"children":5431},{},[5432],{"type":38,"value":87},{"type":29,"tag":30,"props":5434,"children":5435},{},[5436,5440,5441,5447,5448,5454,5455,5461,5462,5468,5469,5474,5475,5481,5482],{"type":29,"tag":34,"props":5437,"children":5438},{},[5439],{"type":38,"value":1351},{"type":38,"value":354},{"type":29,"tag":1354,"props":5442,"children":5445},{"href":5443,"rel":5444},"https:\u002F\u002Fcloudsecurityalliance.org\u002Fartifacts\u002Fai-controls-matrix\u002F",[1358],[5446],{"type":38,"value":5443},{"type":38,"value":1362},{"type":29,"tag":1354,"props":5449,"children":5452},{"href":5450,"rel":5451},"https:\u002F\u002Fcloudsecurityalliance.org\u002Fartifacts\u002Fai-controls-matrix-v1-1",[1358],[5453],{"type":38,"value":5450},{"type":38,"value":1362},{"type":29,"tag":1354,"props":5456,"children":5459},{"href":5457,"rel":5458},"https:\u002F\u002Fcloudsecurityalliance.org\u002Fblog\u002F2026\u002F07\u002F14\u002Fai-controls-matrix-v1-1-strengthening-the-foundation-for-trustworthy-ai",[1358],[5460],{"type":38,"value":5457},{"type":38,"value":1362},{"type":29,"tag":1354,"props":5463,"children":5466},{"href":5464,"rel":5465},"https:\u002F\u002Flabs.cloudsecurityalliance.org\u002Fresearch\u002Fcsa-research-note-aicm-v1-1-update-20260730-csa-styled\u002F",[1358],[5467],{"type":38,"value":5464},{"type":38,"value":1362},{"type":29,"tag":1354,"props":5470,"children":5472},{"href":3575,"rel":5471},[1358],[5473],{"type":38,"value":3575},{"type":38,"value":1362},{"type":29,"tag":1354,"props":5476,"children":5479},{"href":5477,"rel":5478},"https:\u002F\u002Fcloudsecurityalliance.org\u002Farticles\u002Fcloud-security-alliance-announces-availability-of-star-for-ai-level-2-and-valid-ai-ted-for-ai",[1358],[5480],{"type":38,"value":5477},{"type":38,"value":1362},{"type":29,"tag":1354,"props":5483,"children":5486},{"href":5484,"rel":5485},"https:\u002F\u002Fcloudsecurityalliance.org\u002Fartifacts\u002Faicmv1-1-implementation-guidelines-for-model-providers-mp",[1358],[5487],{"type":38,"value":5484},{"type":29,"tag":280,"props":5489,"children":5490},{},[],{"type":29,"tag":284,"props":5492,"children":5494},{"id":5493},"_6-isoiec-420012023-ai-management-system-and-its-companions-42005-and-42006",[5495],{"type":38,"value":18},{"type":29,"tag":290,"props":5497,"children":5499},{"id":5498},"a-identity-and-status-5",[5500],{"type":38,"value":295},{"type":29,"tag":297,"props":5502,"children":5503},{},[5504,5520,5535,5578,5593,5624],{"type":29,"tag":136,"props":5505,"children":5506},{},[5507,5512,5513,5518],{"type":29,"tag":34,"props":5508,"children":5509},{},[5510],{"type":38,"value":5511},"ISO\u002FIEC 42001:2023",{"type":38,"value":4721},{"type":29,"tag":101,"props":5514,"children":5515},{},[5516],{"type":38,"value":5517},"Information technology, Artificial intelligence, Management system",{"type":38,"value":5519},", first edition, Dec 2023, from ISO\u002FIEC JTC 1\u002FSC 42. It is final.",{"type":29,"tag":136,"props":5521,"children":5522},{},[5523,5527,5528,5533],{"type":29,"tag":34,"props":5524,"children":5525},{},[5526],{"type":38,"value":380},{"type":38,"value":382},{"type":29,"tag":34,"props":5529,"children":5530},{},[5531],{"type":38,"value":5532},"certifiable management-system standard",{"type":38,"value":5534}," (Annex SL harmonised structure).",{"type":29,"tag":136,"props":5536,"children":5537},{},[5538,5543,5545,5549],{"type":29,"tag":34,"props":5539,"children":5540},{},[5541],{"type":38,"value":5542},"Amendment status:",{"type":38,"value":5544}," no amendment or revision found. ",{"type":29,"tag":63,"props":5546,"children":5547},{},[5548],{"type":38,"value":77},{"type":29,"tag":297,"props":5550,"children":5551},{},[5552,5564,5569],{"type":29,"tag":136,"props":5553,"children":5554},{},[5555,5557],{"type":38,"value":5556},"Sources disagree on whether 42001 was among the 31 standards that got the Feb 2024 \"climate action\" amendment (clauses 4.1\u002F4.2). AFNOR's list omits it, and one law firm says 42001 was published with the text already included. ",{"type":29,"tag":34,"props":5558,"children":5559},{},[5560],{"type":29,"tag":63,"props":5561,"children":5562},{},[5563],{"type":38,"value":97},{"type":29,"tag":136,"props":5565,"children":5566},{},[5567],{"type":38,"value":5568},"iso.org returned 403 to automated fetch, so the catalogue was not checked directly.",{"type":29,"tag":136,"props":5570,"children":5571},{},[5572,5574],{"type":38,"value":5573},"Implementation guidance, ISO\u002FIEC 42003, is reported as an early work item. ",{"type":29,"tag":63,"props":5575,"children":5576},{},[5577],{"type":38,"value":77},{"type":29,"tag":136,"props":5579,"children":5580},{},[5581,5586,5588],{"type":29,"tag":34,"props":5582,"children":5583},{},[5584],{"type":38,"value":5585},"ISO\u002FIEC 42005:2025",{"type":38,"value":5587},", AI system impact assessment guidance, published May 2025. ",{"type":29,"tag":63,"props":5589,"children":5590},{},[5591],{"type":38,"value":5592},"S: SCC database",{"type":29,"tag":136,"props":5594,"children":5595},{},[5596,5601,5603,5607],{"type":29,"tag":34,"props":5597,"children":5598},{},[5599],{"type":38,"value":5600},"ISO\u002FIEC 42006:2025",{"type":38,"value":5602},", requirements for bodies auditing and certifying 42001 (it adds to ISO\u002FIEC 17021-1), published Jul 2025. ",{"type":29,"tag":63,"props":5604,"children":5605},{},[5606],{"type":38,"value":77},{"type":29,"tag":297,"props":5608,"children":5609},{},[5610],{"type":29,"tag":136,"props":5611,"children":5612},{},[5613,5618,5620],{"type":29,"tag":34,"props":5614,"children":5615},{},[5616],{"type":38,"value":5617},"European co-operation for Accreditation (EA)",{"type":38,"value":5619}," voted on 20 Nov 2025 to make 42006 mandatory for accrediting AIMS certification bodies. ANAB lists it as required. ",{"type":29,"tag":63,"props":5621,"children":5622},{},[5623],{"type":38,"value":77},{"type":29,"tag":136,"props":5625,"children":5626},{},[5627,5632,5633,5637,5638],{"type":29,"tag":34,"props":5628,"children":5629},{},[5630],{"type":38,"value":5631},"Certification ecosystem 2026",{"type":38,"value":354},{"type":29,"tag":63,"props":5634,"children":5635},{},[5636],{"type":38,"value":77},{"type":38,"value":2995},{"type":29,"tag":297,"props":5639,"children":5640},{},[5641,5646],{"type":29,"tag":136,"props":5642,"children":5643},{},[5644],{"type":38,"value":5645},"BSI holds ANAB, UKAS and RvA accreditation (ANAB in Mar 2026).",{"type":29,"tag":136,"props":5647,"children":5648},{},[5649],{"type":38,"value":5650},"Other ANAB-accredited certification bodies are reportedly Schellman, A-LIGN, Coalfire, SGS, DEKRA, TÜV and ControlCase (Aug 2026). Check the ANAB directory.",{"type":29,"tag":290,"props":5652,"children":5654},{"id":5653},"b-native-structure-k",[5655,5657],{"type":38,"value":5656},"(b) Native structure ",{"type":29,"tag":63,"props":5658,"children":5659},{},[5660],{"type":38,"value":87},{"type":29,"tag":297,"props":5662,"children":5663},{},[5664,5717],{"type":29,"tag":136,"props":5665,"children":5666},{},[5667,5672],{"type":29,"tag":34,"props":5668,"children":5669},{},[5670],{"type":38,"value":5671},"Clauses 4–10 are the requirements (\"shall\"):",{"type":29,"tag":297,"props":5673,"children":5674},{},[5675,5680,5685,5697,5702,5707,5712],{"type":29,"tag":136,"props":5676,"children":5677},{},[5678],{"type":38,"value":5679},"4 Context (incl. 4.3 scope and 4.4 the AIMS)",{"type":29,"tag":136,"props":5681,"children":5682},{},[5683],{"type":38,"value":5684},"5 Leadership (5.2 AI policy, 5.3 roles)",{"type":29,"tag":136,"props":5686,"children":5687},{},[5688,5690,5695],{"type":38,"value":5689},"6 Planning (6.1.2 AI risk assessment, 6.1.3 AI risk treatment plus ",{"type":29,"tag":34,"props":5691,"children":5692},{},[5693],{"type":38,"value":5694},"Statement of Applicability",{"type":38,"value":5696},", 6.1.4 AI system impact assessment, 6.2 objectives)",{"type":29,"tag":136,"props":5698,"children":5699},{},[5700],{"type":38,"value":5701},"7 Support (resources, competence, awareness, communication, 7.5 documented information)",{"type":29,"tag":136,"props":5703,"children":5704},{},[5705],{"type":38,"value":5706},"8 Operation (8.1 operational planning and control, incl. externally provided processes; 8.2–8.4 risk assessment, treatment and impact assessment in operation)",{"type":29,"tag":136,"props":5708,"children":5709},{},[5710],{"type":38,"value":5711},"9 Performance evaluation (9.1 monitoring, 9.2 internal audit, 9.3 management review)",{"type":29,"tag":136,"props":5713,"children":5714},{},[5715],{"type":38,"value":5716},"10 Improvement (nonconformity and corrective action)",{"type":29,"tag":136,"props":5718,"children":5719},{},[5720],{"type":29,"tag":34,"props":5721,"children":5722},{},[5723],{"type":38,"value":5724},"Annex A (normative), 9 objectives, 38 controls:",{"type":29,"tag":440,"props":5726,"children":5727},{},[5728,5747],{"type":29,"tag":444,"props":5729,"children":5730},{},[5731],{"type":29,"tag":448,"props":5732,"children":5733},{},[5734,5737,5742],{"type":29,"tag":452,"props":5735,"children":5736},{},[],{"type":29,"tag":452,"props":5738,"children":5739},{},[5740],{"type":38,"value":5741},"Objective",{"type":29,"tag":452,"props":5743,"children":5744},{},[5745],{"type":38,"value":5746},"Example controls",{"type":29,"tag":468,"props":5748,"children":5749},{},[5750,5768,5786,5804,5822,5852,5877,5895,5916],{"type":29,"tag":448,"props":5751,"children":5752},{},[5753,5758,5763],{"type":29,"tag":475,"props":5754,"children":5755},{},[5756],{"type":38,"value":5757},"A.2",{"type":29,"tag":475,"props":5759,"children":5760},{},[5761],{"type":38,"value":5762},"Policies related to AI",{"type":29,"tag":475,"props":5764,"children":5765},{},[5766],{"type":38,"value":5767},"A.2.2 AI policy; A.2.3 alignment with other policies; A.2.4 review",{"type":29,"tag":448,"props":5769,"children":5770},{},[5771,5776,5781],{"type":29,"tag":475,"props":5772,"children":5773},{},[5774],{"type":38,"value":5775},"A.3",{"type":29,"tag":475,"props":5777,"children":5778},{},[5779],{"type":38,"value":5780},"Internal organization",{"type":29,"tag":475,"props":5782,"children":5783},{},[5784],{"type":38,"value":5785},"A.3.2 roles and responsibilities; A.3.3 reporting of concerns",{"type":29,"tag":448,"props":5787,"children":5788},{},[5789,5794,5799],{"type":29,"tag":475,"props":5790,"children":5791},{},[5792],{"type":38,"value":5793},"A.4",{"type":29,"tag":475,"props":5795,"children":5796},{},[5797],{"type":38,"value":5798},"Resources for AI systems",{"type":29,"tag":475,"props":5800,"children":5801},{},[5802],{"type":38,"value":5803},"A.4.2 resource documentation; A.4.3 data; A.4.4 tooling; A.4.5 system and computing; A.4.6 human resources",{"type":29,"tag":448,"props":5805,"children":5806},{},[5807,5812,5817],{"type":29,"tag":475,"props":5808,"children":5809},{},[5810],{"type":38,"value":5811},"A.5",{"type":29,"tag":475,"props":5813,"children":5814},{},[5815],{"type":38,"value":5816},"Assessing impacts of AI systems",{"type":29,"tag":475,"props":5818,"children":5819},{},[5820],{"type":38,"value":5821},"A.5.2–A.5.5 impact assessment process, documentation, on individuals and on society",{"type":29,"tag":448,"props":5823,"children":5824},{},[5825,5830,5835],{"type":29,"tag":475,"props":5826,"children":5827},{},[5828],{"type":38,"value":5829},"A.6",{"type":29,"tag":475,"props":5831,"children":5832},{},[5833],{"type":38,"value":5834},"AI system life cycle",{"type":29,"tag":475,"props":5836,"children":5837},{},[5838,5840,5845,5847],{"type":38,"value":5839},"A.6.1.x objectives and processes for responsible development; A.6.2.2–A.6.2.8 requirements, design, V&V, deployment, ",{"type":29,"tag":34,"props":5841,"children":5842},{},[5843],{"type":38,"value":5844},"operation and monitoring (A.6.2.6)",{"type":38,"value":5846},", technical documentation, ",{"type":29,"tag":34,"props":5848,"children":5849},{},[5850],{"type":38,"value":5851},"event logs (A.6.2.8)",{"type":29,"tag":448,"props":5853,"children":5854},{},[5855,5860,5865],{"type":29,"tag":475,"props":5856,"children":5857},{},[5858],{"type":38,"value":5859},"A.7",{"type":29,"tag":475,"props":5861,"children":5862},{},[5863],{"type":38,"value":5864},"Data for AI systems",{"type":29,"tag":475,"props":5866,"children":5867},{},[5868,5870,5875],{"type":38,"value":5869},"A.7.2–A.7.6 data for development, acquisition, quality, ",{"type":29,"tag":34,"props":5871,"children":5872},{},[5873],{"type":38,"value":5874},"provenance (A.7.5)",{"type":38,"value":5876},", preparation",{"type":29,"tag":448,"props":5878,"children":5879},{},[5880,5885,5890],{"type":29,"tag":475,"props":5881,"children":5882},{},[5883],{"type":38,"value":5884},"A.8",{"type":29,"tag":475,"props":5886,"children":5887},{},[5888],{"type":38,"value":5889},"Information for interested parties",{"type":29,"tag":475,"props":5891,"children":5892},{},[5893],{"type":38,"value":5894},"A.8.2–A.8.5 user documentation, external reporting, incident communication, information to interested parties",{"type":29,"tag":448,"props":5896,"children":5897},{},[5898,5903,5908],{"type":29,"tag":475,"props":5899,"children":5900},{},[5901],{"type":38,"value":5902},"A.9",{"type":29,"tag":475,"props":5904,"children":5905},{},[5906],{"type":38,"value":5907},"Use of AI systems",{"type":29,"tag":475,"props":5909,"children":5910},{},[5911],{"type":29,"tag":34,"props":5912,"children":5913},{},[5914],{"type":38,"value":5915},"A.9.2 processes for responsible use; A.9.3 objectives for responsible use; A.9.4 intended use",{"type":29,"tag":448,"props":5917,"children":5918},{},[5919,5924,5929],{"type":29,"tag":475,"props":5920,"children":5921},{},[5922],{"type":38,"value":5923},"A.10",{"type":29,"tag":475,"props":5925,"children":5926},{},[5927],{"type":38,"value":5928},"Third-party and customer relationships",{"type":29,"tag":475,"props":5930,"children":5931},{},[5932,5934,5939],{"type":38,"value":5933},"A.10.2 allocating responsibilities; ",{"type":29,"tag":34,"props":5935,"children":5936},{},[5937],{"type":38,"value":5938},"A.10.3 suppliers",{"type":38,"value":5940},"; A.10.4 customers",{"type":29,"tag":297,"props":5942,"children":5943},{},[5944,5949],{"type":29,"tag":136,"props":5945,"children":5946},{},[5947],{"type":38,"value":5948},"Annex B gives implementation guidance, Annex C lists AI objectives and risk sources, and Annex D covers use across sectors.",{"type":29,"tag":136,"props":5950,"children":5951},{},[5952,5954,5959],{"type":38,"value":5953},"The organisation selects controls through the SoA (exclusions must be justified). The role-agnostic design covers AI providers, producers ",{"type":29,"tag":101,"props":5955,"children":5956},{},[5957],{"type":38,"value":5958},"and users",{"type":38,"value":120},{"type":29,"tag":290,"props":5961,"children":5963},{"id":5962},"c-who-asks-and-why-5",[5964],{"type":38,"value":843},{"type":29,"tag":297,"props":5966,"children":5967},{},[5968,5973,5978,5989],{"type":29,"tag":136,"props":5969,"children":5970},{},[5971],{"type":38,"value":5972},"Enterprise buyers, especially in the EU and in finance, ask vendors for it as the \"ISO 27001 for AI\".",{"type":29,"tag":136,"props":5974,"children":5975},{},[5976],{"type":38,"value":5977},"It is a prerequisite for CSA STAR for AI Level 2 (a4\u002Fa5).",{"type":29,"tag":136,"props":5979,"children":5980},{},[5981,5983,5987],{"type":38,"value":5982},"Organisations use it to show \"presumption-like\" governance maturity towards the EU AI Act. A harmonised QMS standard under the AI Act is separate (CEN-CENELEC JTC 21); 42001 is ",{"type":29,"tag":101,"props":5984,"children":5985},{},[5986],{"type":38,"value":195},{"type":38,"value":5988}," a harmonised standard.",{"type":29,"tag":136,"props":5990,"children":5991},{},[5992],{"type":38,"value":5993},"Deployers (AI users) certify too, scoping the AIMS to their use of AI.",{"type":29,"tag":290,"props":5995,"children":5997},{"id":5996},"d-how-evidence-works-5",[5998],{"type":38,"value":877},{"type":29,"tag":297,"props":6000,"children":6001},{},[6002,6012,6040,6045],{"type":29,"tag":136,"props":6003,"children":6004},{},[6005,6010],{"type":29,"tag":34,"props":6006,"children":6007},{},[6008],{"type":38,"value":6009},"Third-party certification",{"type":38,"value":6011}," by an accredited certification body (ISO 17021-1 + 42006).",{"type":29,"tag":136,"props":6013,"children":6014},{},[6015,6017],{"type":38,"value":6016},"Audit stages:\n",{"type":29,"tag":297,"props":6018,"children":6019},{},[6020,6030],{"type":29,"tag":136,"props":6021,"children":6022},{},[6023,6028],{"type":29,"tag":34,"props":6024,"children":6025},{},[6026],{"type":38,"value":6027},"Stage 1",{"type":38,"value":6029}," is a documentation and readiness review: scope, AI policy, risk and impact assessment, SoA.",{"type":29,"tag":136,"props":6031,"children":6032},{},[6033,6038],{"type":29,"tag":34,"props":6034,"children":6035},{},[6036],{"type":38,"value":6037},"Stage 2",{"type":38,"value":6039}," looks for implementation evidence over time: records, monitoring results, internal audit, management review.",{"type":29,"tag":136,"props":6041,"children":6042},{},[6043],{"type":38,"value":6044},"After that comes a 3-year certificate with annual surveillance audits.",{"type":29,"tag":136,"props":6046,"children":6047},{},[6048],{"type":38,"value":6049},"Auditors sample records and expect objective evidence that each SoA control is operating.",{"type":29,"tag":290,"props":6051,"children":6053},{"id":6052},"e-what-qpoint-can-evidence-3",[6054],{"type":38,"value":896},{"type":29,"tag":440,"props":6056,"children":6057},{},[6058,6077],{"type":29,"tag":444,"props":6059,"children":6060},{},[6061],{"type":29,"tag":448,"props":6062,"children":6063},{},[6064,6069,6073],{"type":29,"tag":452,"props":6065,"children":6066},{},[6067],{"type":38,"value":6068},"Clause\u002Fcontrol",{"type":29,"tag":452,"props":6070,"children":6071},{},[6072],{"type":38,"value":915},{"type":29,"tag":452,"props":6074,"children":6075},{},[6076],{"type":38,"value":920},{"type":29,"tag":468,"props":6078,"children":6079},{},[6080,6105,6130,6152,6188,6217,6239,6261,6286,6308,6346],{"type":29,"tag":448,"props":6081,"children":6082},{},[6083,6093,6100],{"type":29,"tag":475,"props":6084,"children":6085},{},[6086,6091],{"type":29,"tag":34,"props":6087,"children":6088},{},[6089],{"type":38,"value":6090},"A.4.2 \u002F A.4.4 \u002F A.4.5",{"type":38,"value":6092}," resource documentation (tooling, systems)",{"type":29,"tag":475,"props":6094,"children":6095},{},[6096],{"type":29,"tag":34,"props":6097,"children":6098},{},[6099],{"type":38,"value":939},{"type":29,"tag":475,"props":6101,"children":6102},{},[6103],{"type":38,"value":6104},"Live inventory of AI tools, models, agents, MCP servers and providers.",{"type":29,"tag":448,"props":6106,"children":6107},{},[6108,6118,6125],{"type":29,"tag":475,"props":6109,"children":6110},{},[6111,6116],{"type":29,"tag":34,"props":6112,"children":6113},{},[6114],{"type":38,"value":6115},"A.9.2 \u002F A.9.3 \u002F A.9.4",{"type":38,"value":6117}," responsible and intended use",{"type":29,"tag":475,"props":6119,"children":6120},{},[6121],{"type":29,"tag":34,"props":6122,"children":6123},{},[6124],{"type":38,"value":4333},{"type":29,"tag":475,"props":6126,"children":6127},{},[6128],{"type":38,"value":6129},"Use-policy enforcement and detection of out-of-policy use, e.g. unapproved provider or data class.",{"type":29,"tag":448,"props":6131,"children":6132},{},[6133,6143,6147],{"type":29,"tag":475,"props":6134,"children":6135},{},[6136,6141],{"type":29,"tag":34,"props":6137,"children":6138},{},[6139],{"type":38,"value":6140},"A.10.3",{"type":38,"value":6142}," suppliers",{"type":29,"tag":475,"props":6144,"children":6145},{},[6146],{"type":38,"value":960},{"type":29,"tag":475,"props":6148,"children":6149},{},[6150],{"type":38,"value":6151},"AI suppliers actually in use against the approved list; data shared with each.",{"type":29,"tag":448,"props":6153,"children":6154},{},[6155,6172,6176],{"type":29,"tag":475,"props":6156,"children":6157},{},[6158,6163,6165,6170],{"type":29,"tag":34,"props":6159,"children":6160},{},[6161],{"type":38,"value":6162},"A.6.2.6",{"type":38,"value":6164}," operation and monitoring \u002F ",{"type":29,"tag":34,"props":6166,"children":6167},{},[6168],{"type":38,"value":6169},"A.6.2.8",{"type":38,"value":6171}," event logs",{"type":29,"tag":475,"props":6173,"children":6174},{},[6175],{"type":38,"value":960},{"type":29,"tag":475,"props":6177,"children":6178},{},[6179,6181,6186],{"type":38,"value":6180},"For ",{"type":29,"tag":101,"props":6182,"children":6183},{},[6184],{"type":38,"value":6185},"deployed\u002Fused",{"type":38,"value":6187}," AI. Provider-internal logs are out of reach.",{"type":29,"tag":448,"props":6189,"children":6190},{},[6191,6208,6212],{"type":29,"tag":475,"props":6192,"children":6193},{},[6194,6199,6201,6206],{"type":29,"tag":34,"props":6195,"children":6196},{},[6197],{"type":38,"value":6198},"A.7.5",{"type":38,"value":6200}," data provenance \u002F ",{"type":29,"tag":34,"props":6202,"children":6203},{},[6204],{"type":38,"value":6205},"A.4.3",{"type":38,"value":6207}," data resources",{"type":29,"tag":475,"props":6209,"children":6210},{},[6211],{"type":38,"value":1001},{"type":29,"tag":475,"props":6213,"children":6214},{},[6215],{"type":38,"value":6216},"Shows which data went to which AI (inputs), not training-data provenance.",{"type":29,"tag":448,"props":6218,"children":6219},{},[6220,6230,6234],{"type":29,"tag":475,"props":6221,"children":6222},{},[6223,6228],{"type":29,"tag":34,"props":6224,"children":6225},{},[6226],{"type":38,"value":6227},"A.8.4",{"type":38,"value":6229}," incident communication",{"type":29,"tag":475,"props":6231,"children":6232},{},[6233],{"type":38,"value":1001},{"type":29,"tag":475,"props":6235,"children":6236},{},[6237],{"type":38,"value":6238},"Incident detection records.",{"type":29,"tag":448,"props":6240,"children":6241},{},[6242,6252,6256],{"type":29,"tag":475,"props":6243,"children":6244},{},[6245,6250],{"type":29,"tag":34,"props":6246,"children":6247},{},[6248],{"type":38,"value":6249},"6.1.2 \u002F 8.2",{"type":38,"value":6251}," AI risk assessment",{"type":29,"tag":475,"props":6253,"children":6254},{},[6255],{"type":38,"value":1001},{"type":29,"tag":475,"props":6257,"children":6258},{},[6259],{"type":38,"value":6260},"Inventory and flows feed risk identification.",{"type":29,"tag":448,"props":6262,"children":6263},{},[6264,6274,6281],{"type":29,"tag":475,"props":6265,"children":6266},{},[6267,6272],{"type":29,"tag":34,"props":6268,"children":6269},{},[6270],{"type":38,"value":6271},"9.1",{"type":38,"value":6273}," monitoring and measurement",{"type":29,"tag":475,"props":6275,"children":6276},{},[6277],{"type":29,"tag":34,"props":6278,"children":6279},{},[6280],{"type":38,"value":939},{"type":29,"tag":475,"props":6282,"children":6283},{},[6284],{"type":38,"value":6285},"Metrics such as % of AI traffic to approved providers, redaction counts, blocked events.",{"type":29,"tag":448,"props":6287,"children":6288},{},[6289,6299,6303],{"type":29,"tag":475,"props":6290,"children":6291},{},[6292,6297],{"type":29,"tag":34,"props":6293,"children":6294},{},[6295],{"type":38,"value":6296},"4.3",{"type":38,"value":6298}," scope",{"type":29,"tag":475,"props":6300,"children":6301},{},[6302],{"type":38,"value":1001},{"type":29,"tag":475,"props":6304,"children":6305},{},[6306],{"type":38,"value":6307},"Discovery tells you what is in scope.",{"type":29,"tag":448,"props":6309,"children":6310},{},[6311,6334,6341],{"type":29,"tag":475,"props":6312,"children":6313},{},[6314,6318,6320,6325,6327,6332],{"type":29,"tag":34,"props":6315,"children":6316},{},[6317],{"type":38,"value":5811},{"type":38,"value":6319}," impact assessments, ",{"type":29,"tag":34,"props":6321,"children":6322},{},[6323],{"type":38,"value":6324},"A.6.1–A.6.2.5",{"type":38,"value":6326}," development, ",{"type":29,"tag":34,"props":6328,"children":6329},{},[6330],{"type":38,"value":6331},"A.7.2–A.7.4\u002FA.7.6",{"type":38,"value":6333}," training data",{"type":29,"tag":475,"props":6335,"children":6336},{},[6337],{"type":29,"tag":34,"props":6338,"children":6339},{},[6340],{"type":38,"value":1247},{"type":29,"tag":475,"props":6342,"children":6343},{},[6344],{"type":38,"value":6345},"Assessment documents and model development.",{"type":29,"tag":448,"props":6347,"children":6348},{},[6349,6380,6387],{"type":29,"tag":475,"props":6350,"children":6351},{},[6352,6357,6359,6364,6366,6371,6373,6378],{"type":29,"tag":34,"props":6353,"children":6354},{},[6355],{"type":38,"value":6356},"5.x",{"type":38,"value":6358}," leadership, ",{"type":29,"tag":34,"props":6360,"children":6361},{},[6362],{"type":38,"value":6363},"7.2",{"type":38,"value":6365}," competence, ",{"type":29,"tag":34,"props":6367,"children":6368},{},[6369],{"type":38,"value":6370},"9.2",{"type":38,"value":6372}," internal audit, ",{"type":29,"tag":34,"props":6374,"children":6375},{},[6376],{"type":38,"value":6377},"9.3",{"type":38,"value":6379}," management review",{"type":29,"tag":475,"props":6381,"children":6382},{},[6383],{"type":29,"tag":34,"props":6384,"children":6385},{},[6386],{"type":38,"value":1247},{"type":29,"tag":475,"props":6388,"children":6389},{},[6390,6392,6397],{"type":38,"value":6391},"Organisational governance (Qpoint reports can be ",{"type":29,"tag":101,"props":6393,"children":6394},{},[6395],{"type":38,"value":6396},"inputs",{"type":38,"value":6398}," to management review).",{"type":29,"tag":290,"props":6400,"children":6402},{"id":6401},"f-crosswalks-3",[6403],{"type":38,"value":1268},{"type":29,"tag":297,"props":6405,"children":6406},{},[6407,6428,6442,6456,6470],{"type":29,"tag":136,"props":6408,"children":6409},{},[6410,6415,6417,6422,6424],{"type":29,"tag":34,"props":6411,"children":6412},{},[6413],{"type":38,"value":6414},"Official ISO:",{"type":38,"value":6416}," ISO\u002FIEC 42001 Annex D references other management-system standards. There is an informal alignment with ",{"type":29,"tag":34,"props":6418,"children":6419},{},[6420],{"type":38,"value":6421},"ISO\u002FIEC 27001",{"type":38,"value":6423}," through the shared Harmonized Structure, which allows an integrated management system. ISO\u002FIEC 23894 provides AI risk-management guidance. ",{"type":29,"tag":63,"props":6425,"children":6426},{},[6427],{"type":38,"value":87},{"type":29,"tag":136,"props":6429,"children":6430},{},[6431,6436,6438],{"type":29,"tag":34,"props":6432,"children":6433},{},[6434],{"type":38,"value":6435},"NIST AI RMF ↔ 42001",{"type":38,"value":6437}," crosswalk is on NIST AIRC (community-submitted). ",{"type":29,"tag":63,"props":6439,"children":6440},{},[6441],{"type":38,"value":77},{"type":29,"tag":136,"props":6443,"children":6444},{},[6445,6450,6452],{"type":29,"tag":34,"props":6446,"children":6447},{},[6448],{"type":38,"value":6449},"CSA AICM → 42001",{"type":38,"value":6451}," is an official download. ",{"type":29,"tag":63,"props":6453,"children":6454},{},[6455],{"type":38,"value":67},{"type":29,"tag":136,"props":6457,"children":6458},{},[6459,6464,6466],{"type":29,"tag":34,"props":6460,"children":6461},{},[6462],{"type":38,"value":6463},"AIUC-1 → 42001",{"type":38,"value":6465}," is official at clause level. ",{"type":29,"tag":63,"props":6467,"children":6468},{},[6469],{"type":38,"value":67},{"type":29,"tag":136,"props":6471,"children":6472},{},[6473,6475],{"type":38,"value":6474},"HITRUST's AI Security Certification references 42001 among its sources. ",{"type":29,"tag":63,"props":6476,"children":6477},{},[6478],{"type":38,"value":77},{"type":29,"tag":30,"props":6480,"children":6481},{},[6482,6486,6487,6493,6495,6501,6503,6509,6511,6517,6518,6524,6525],{"type":29,"tag":34,"props":6483,"children":6484},{},[6485],{"type":38,"value":1351},{"type":38,"value":354},{"type":29,"tag":1354,"props":6488,"children":6491},{"href":6489,"rel":6490},"https:\u002F\u002Fwww.iso.org\u002Fstandard\u002F42001",[1358],[6492],{"type":38,"value":6489},{"type":38,"value":6494}," (403 to automated fetch) · ",{"type":29,"tag":1354,"props":6496,"children":6499},{"href":6497,"rel":6498},"https:\u002F\u002Fscc-ccn.ca\u002Fstandardsdb\u002Fstandards\u002F8188107",[1358],[6500],{"type":38,"value":6497},{"type":38,"value":6502}," (42005) · ",{"type":29,"tag":1354,"props":6504,"children":6507},{"href":6505,"rel":6506},"https:\u002F\u002Fscc-ccn.ca\u002Fstandardsdb\u002Fstandards\u002F8187573",[1358],[6508],{"type":38,"value":6505},{"type":38,"value":6510}," (42006) · ",{"type":29,"tag":1354,"props":6512,"children":6515},{"href":6513,"rel":6514},"https:\u002F\u002Fwww.bsigroup.com\u002Fen-GB\u002Finsights-and-media\u002Fmedia-centre\u002Fpress-releases\u002F2026\u002Fmarch\u002Fbsi-secures-anab-accreditation-to-certify-isoiec-42001\u002F",[1358],[6516],{"type":38,"value":6513},{"type":38,"value":1362},{"type":29,"tag":1354,"props":6519,"children":6522},{"href":6520,"rel":6521},"https:\u002F\u002Fbrightdefense.com\u002Fnews\u002Fiso-42006-raises-the-bar-for-iso-42001-certifiers",[1358],[6523],{"type":38,"value":6520},{"type":38,"value":1362},{"type":29,"tag":1354,"props":6526,"children":6529},{"href":6527,"rel":6528},"https:\u002F\u002Fwww.afnor.org\u002Fen\u002Fdecryptions\u002Fclimate-and-decarbonization\u002Fclimate-game-changer-standards-management\u002F",[1358],[6530],{"type":38,"value":6527},{"type":29,"tag":280,"props":6532,"children":6533},{},[],{"type":29,"tag":284,"props":6535,"children":6537},{"id":6536},"_7-eu-artificial-intelligence-act-regulation-eu-20241689-as-amended-by-the-digital-omnibus-on-ai-regulation-eu-20261744",[6538],{"type":38,"value":19},{"type":29,"tag":290,"props":6540,"children":6542},{"id":6541},"a-identity-and-status-6",[6543],{"type":38,"value":295},{"type":29,"tag":297,"props":6545,"children":6546},{},[6547,6562,6572],{"type":29,"tag":136,"props":6548,"children":6549},{},[6550,6554,6555,6560],{"type":29,"tag":34,"props":6551,"children":6552},{},[6553],{"type":38,"value":380},{"type":38,"value":354},{"type":29,"tag":34,"props":6556,"children":6557},{},[6558],{"type":38,"value":6559},"law",{"type":38,"value":6561}," (an EU regulation, directly applicable).",{"type":29,"tag":136,"props":6563,"children":6564},{},[6565,6570],{"type":29,"tag":34,"props":6566,"children":6567},{},[6568],{"type":38,"value":6569},"AI Act:",{"type":38,"value":6571}," in force since 1 Aug 2024.",{"type":29,"tag":136,"props":6573,"children":6574},{},[6575,6580],{"type":29,"tag":34,"props":6576,"children":6577},{},[6578],{"type":38,"value":6579},"Digital Omnibus on AI:",{"type":29,"tag":297,"props":6581,"children":6582},{},[6583,6588,6593,6615],{"type":29,"tag":136,"props":6584,"children":6585},{},[6586],{"type":38,"value":6587},"The Commission proposed it on 19 Nov 2025.",{"type":29,"tag":136,"props":6589,"children":6590},{},[6591],{"type":38,"value":6592},"Trilogue agreement came around 7 May 2026, Parliament adopted it on 16 Jun 2026 and the Council on 29 Jun 2026.",{"type":29,"tag":136,"props":6594,"children":6595},{},[6596,6601,6603,6608,6610],{"type":29,"tag":34,"props":6597,"children":6598},{},[6599],{"type":38,"value":6600},"Regulation (EU) 2026\u002F1744 of 8 July 2026",{"type":38,"value":6602}," was published in the OJ on 24 Jul 2026 and ",{"type":29,"tag":34,"props":6604,"children":6605},{},[6606],{"type":38,"value":6607},"entered into force on 27 Jul 2026",{"type":38,"value":6609},". EUR-Lex lists it as in force. ",{"type":29,"tag":63,"props":6611,"children":6612},{},[6613],{"type":38,"value":6614},"V regulation existence and date; S adoption steps and entry-into-force date",{"type":29,"tag":136,"props":6616,"children":6617},{},[6618,6620,6625,6627,6632,6634],{"type":38,"value":6619},"The separate ",{"type":29,"tag":34,"props":6621,"children":6622},{},[6623],{"type":38,"value":6624},"Digital Omnibus on data, GDPR and NIS2",{"type":38,"value":6626}," (COM(2025) 837, which holds the single incident-reporting entry point) is ",{"type":29,"tag":34,"props":6628,"children":6629},{},[6630],{"type":38,"value":6631},"not adopted",{"type":38,"value":6633},". As of Oct 2026 trilogues had reportedly not started. ",{"type":29,"tag":63,"props":6635,"children":6636},{},[6637],{"type":38,"value":77},{"type":29,"tag":290,"props":6639,"children":6641},{"id":6640},"b-native-structure-risk-tiers-roles-key-articles-and-the-current-timeline",[6642,6644],{"type":38,"value":6643},"(b) Native structure. Risk tiers, roles, key articles and the ",{"type":29,"tag":34,"props":6645,"children":6646},{},[6647],{"type":38,"value":6648},"current timeline",{"type":29,"tag":30,"props":6650,"children":6651},{},[6652],{"type":29,"tag":34,"props":6653,"children":6654},{},[6655],{"type":38,"value":6656},"Risk tiers:",{"type":29,"tag":297,"props":6658,"children":6659},{},[6660,6670,6680,6690,6700],{"type":29,"tag":136,"props":6661,"children":6662},{},[6663,6668],{"type":29,"tag":34,"props":6664,"children":6665},{},[6666],{"type":38,"value":6667},"Prohibited",{"type":38,"value":6669}," (Art. 5).",{"type":29,"tag":136,"props":6671,"children":6672},{},[6673,6678],{"type":29,"tag":34,"props":6674,"children":6675},{},[6676],{"type":38,"value":6677},"High-risk",{"type":38,"value":6679}," (Art. 6): Annex I products (Art. 6(1)) and Annex III use-cases (Art. 6(2)), with an Art. 6(3) derogation.",{"type":29,"tag":136,"props":6681,"children":6682},{},[6683,6688],{"type":29,"tag":34,"props":6684,"children":6685},{},[6686],{"type":38,"value":6687},"Transparency-risk",{"type":38,"value":6689}," (Art. 50).",{"type":29,"tag":136,"props":6691,"children":6692},{},[6693,6698],{"type":29,"tag":34,"props":6694,"children":6695},{},[6696],{"type":38,"value":6697},"General-purpose AI models",{"type":38,"value":6699}," (Chapter V, Arts. 51–56, with \"systemic risk\" GPAI on top).",{"type":29,"tag":136,"props":6701,"children":6702},{},[6703],{"type":29,"tag":34,"props":6704,"children":6705},{},[6706],{"type":38,"value":6707},"Minimal risk.",{"type":29,"tag":30,"props":6709,"children":6710},{},[6711,6716,6718,6723,6725,6730],{"type":29,"tag":34,"props":6712,"children":6713},{},[6714],{"type":38,"value":6715},"Roles (Art. 3):",{"type":38,"value":6717}," provider, ",{"type":29,"tag":34,"props":6719,"children":6720},{},[6721],{"type":38,"value":6722},"deployer",{"type":38,"value":6724},", importer, distributor, authorised representative and product manufacturer. A deployer becomes a provider under ",{"type":29,"tag":34,"props":6726,"children":6727},{},[6728],{"type":38,"value":6729},"Art. 25",{"type":38,"value":6731}," if it puts its name on a high-risk system, makes substantial modifications or changes its intended purpose.",{"type":29,"tag":30,"props":6733,"children":6734},{},[6735,6740,6741,6746],{"type":29,"tag":34,"props":6736,"children":6737},{},[6738],{"type":38,"value":6739},"Timeline as it stands on 26 Oct 2026",{"type":38,"value":354},{"type":29,"tag":63,"props":6742,"children":6743},{},[6744],{"type":38,"value":6745},"S: FPF, Gibson Dunn, Jones Walker, CSA; consistent",{"type":38,"value":675},{"type":29,"tag":440,"props":6748,"children":6749},{},[6750,6766],{"type":29,"tag":444,"props":6751,"children":6752},{},[6753],{"type":29,"tag":448,"props":6754,"children":6755},{},[6756,6761],{"type":29,"tag":452,"props":6757,"children":6758},{},[6759],{"type":38,"value":6760},"Date",{"type":29,"tag":452,"props":6762,"children":6763},{},[6764],{"type":38,"value":6765},"What applies",{"type":29,"tag":468,"props":6767,"children":6768},{},[6769,6797,6820,6843,6880,6896,6916],{"type":29,"tag":448,"props":6770,"children":6771},{},[6772,6780],{"type":29,"tag":475,"props":6773,"children":6774},{},[6775],{"type":29,"tag":34,"props":6776,"children":6777},{},[6778],{"type":38,"value":6779},"2 Feb 2025",{"type":29,"tag":475,"props":6781,"children":6782},{},[6783,6785,6790,6791,6796],{"type":38,"value":6784},"Chapters I–II: definitions, ",{"type":29,"tag":34,"props":6786,"children":6787},{},[6788],{"type":38,"value":6789},"Art. 4 AI literacy",{"type":38,"value":4721},{"type":29,"tag":34,"props":6792,"children":6793},{},[6794],{"type":38,"value":6795},"Art. 5 prohibited practices",{"type":38,"value":120},{"type":29,"tag":448,"props":6798,"children":6799},{},[6800,6808],{"type":29,"tag":475,"props":6801,"children":6802},{},[6803],{"type":29,"tag":34,"props":6804,"children":6805},{},[6806],{"type":38,"value":6807},"2 Aug 2025",{"type":29,"tag":475,"props":6809,"children":6810},{},[6811,6813,6818],{"type":38,"value":6812},"GPAI model obligations (Chapter V; GPAI Code of Practice published Jul 2025), governance (AI Office, Board), notified-body framework, confidentiality, ",{"type":29,"tag":34,"props":6814,"children":6815},{},[6816],{"type":38,"value":6817},"penalties",{"type":38,"value":6819}," (Art. 99). Member States designate market-surveillance and notifying authorities.",{"type":29,"tag":448,"props":6821,"children":6822},{},[6823,6831],{"type":29,"tag":475,"props":6824,"children":6825},{},[6826],{"type":29,"tag":34,"props":6827,"children":6828},{},[6829],{"type":38,"value":6830},"2 Aug 2026",{"type":29,"tag":475,"props":6832,"children":6833},{},[6834,6836,6841],{"type":38,"value":6835},"General application, including ",{"type":29,"tag":34,"props":6837,"children":6838},{},[6839],{"type":38,"value":6840},"Art. 50 transparency obligations (not delayed)",{"type":38,"value":6842},". National enforcement is live.",{"type":29,"tag":448,"props":6844,"children":6845},{},[6846,6854],{"type":29,"tag":475,"props":6847,"children":6848},{},[6849],{"type":29,"tag":34,"props":6850,"children":6851},{},[6852],{"type":38,"value":6853},"2 Dec 2026",{"type":29,"tag":475,"props":6855,"children":6856},{},[6857,6859,6864,6866,6871,6873,6878],{"type":38,"value":6858},"End of grace period for ",{"type":29,"tag":34,"props":6860,"children":6861},{},[6862],{"type":38,"value":6863},"Art. 50(2) machine-readable marking",{"type":38,"value":6865}," for systems placed on the market ",{"type":29,"tag":101,"props":6867,"children":6868},{},[6869],{"type":38,"value":6870},"before",{"type":38,"value":6872}," 2 Aug 2026. New ",{"type":29,"tag":34,"props":6874,"children":6875},{},[6876],{"type":38,"value":6877},"Art. 5 prohibition",{"type":38,"value":6879}," on AI generating CSAM or non-consensual intimate imagery applies (added by the Omnibus).",{"type":29,"tag":448,"props":6881,"children":6882},{},[6883,6891],{"type":29,"tag":475,"props":6884,"children":6885},{},[6886],{"type":29,"tag":34,"props":6887,"children":6888},{},[6889],{"type":38,"value":6890},"2 Aug 2027",{"type":29,"tag":475,"props":6892,"children":6893},{},[6894],{"type":38,"value":6895},"Legacy GPAI models (placed before 2 Aug 2025) must comply. Each Member State must have a sandbox operational. Commission high-risk classification guidelines due (FPF gives 1 Aug or 2 Aug 2027).",{"type":29,"tag":448,"props":6897,"children":6898},{},[6899,6906],{"type":29,"tag":475,"props":6900,"children":6901},{},[6902],{"type":29,"tag":34,"props":6903,"children":6904},{},[6905],{"type":38,"value":181},{"type":29,"tag":475,"props":6907,"children":6908},{},[6909,6914],{"type":29,"tag":34,"props":6910,"children":6911},{},[6912],{"type":38,"value":6913},"High-risk obligations (Chapter III Sections 1–3) for Annex III systems",{"type":38,"value":6915},". This was 2 Aug 2026 before the Omnibus.",{"type":29,"tag":448,"props":6917,"children":6918},{},[6919,6926],{"type":29,"tag":475,"props":6920,"children":6921},{},[6922],{"type":29,"tag":34,"props":6923,"children":6924},{},[6925],{"type":38,"value":188},{"type":29,"tag":475,"props":6927,"children":6928},{},[6929,6931,6936],{"type":38,"value":6930},"High-risk obligations for ",{"type":29,"tag":34,"props":6932,"children":6933},{},[6934],{"type":38,"value":6935},"Annex I",{"type":38,"value":6937}," (product-embedded) systems. This was 2 Aug 2027 before the Omnibus.",{"type":29,"tag":30,"props":6939,"children":6940},{},[6941,6946,6947,6951],{"type":29,"tag":34,"props":6942,"children":6943},{},[6944],{"type":38,"value":6945},"Other Omnibus changes relevant here",{"type":38,"value":354},{"type":29,"tag":63,"props":6948,"children":6949},{},[6950],{"type":38,"value":77},{"type":38,"value":675},{"type":29,"tag":297,"props":6953,"children":6954},{},[6955,6972,6984,6996,7001],{"type":29,"tag":136,"props":6956,"children":6957},{},[6958,6963,6965,6970],{"type":29,"tag":34,"props":6959,"children":6960},{},[6961],{"type":38,"value":6962},"Art. 4",{"type":38,"value":6964}," now obliges providers and deployers to ",{"type":29,"tag":101,"props":6966,"children":6967},{},[6968],{"type":38,"value":6969},"support the development of",{"type":38,"value":6971}," AI literacy (it used to say \"ensure\"). It explicitly does not require guaranteeing any individual's level, and a new Art. 4(2) gives the Commission and Member States a guidance role.",{"type":29,"tag":136,"props":6973,"children":6974},{},[6975,6977,6982],{"type":38,"value":6976},"A new ",{"type":29,"tag":34,"props":6978,"children":6979},{},[6980],{"type":38,"value":6981},"Art. 4a",{"type":38,"value":6983}," allows processing of special-category data for bias detection across all AI systems, not just high-risk ones, where strictly necessary.",{"type":29,"tag":136,"props":6985,"children":6986},{},[6987,6989,6994],{"type":38,"value":6988},"Simplified documentation and QMS now extend to ",{"type":29,"tag":34,"props":6990,"children":6991},{},[6992],{"type":38,"value":6993},"small mid-caps",{"type":38,"value":6995}," (\u003C750 staff, ≤€150m turnover).",{"type":29,"tag":136,"props":6997,"children":6998},{},[6999],{"type":38,"value":7000},"The AI Office has exclusive competence over GPAI-based systems from the same provider group.",{"type":29,"tag":136,"props":7002,"children":7003},{},[7004,7006],{"type":38,"value":7005},"The 2 Dec 2027 date fixes the earlier \"stop-the-clock\" proposal (which tied application to standards readiness) to a calendar date. ",{"type":29,"tag":63,"props":7007,"children":7008},{},[7009],{"type":38,"value":77},{"type":29,"tag":30,"props":7011,"children":7012},{},[7013],{"type":29,"tag":34,"props":7014,"children":7015},{},[7016],{"type":38,"value":7017},"Deployer obligations (the Qpoint customer's role in most cases):",{"type":29,"tag":297,"props":7019,"children":7020},{},[7021,7037,7100,7110,7127],{"type":29,"tag":136,"props":7022,"children":7023},{},[7024,7028,7030,7035],{"type":29,"tag":34,"props":7025,"children":7026},{},[7027],{"type":38,"value":6962},{"type":38,"value":7029},", AI literacy (above). It applies to ",{"type":29,"tag":101,"props":7031,"children":7032},{},[7033],{"type":38,"value":7034},"all",{"type":38,"value":7036}," AI systems, including ChatGPT, Copilot and coding agents. Art. 99 sets no specific fine; national rules may.",{"type":29,"tag":136,"props":7038,"children":7039},{},[7040,7045,7047],{"type":29,"tag":34,"props":7041,"children":7042},{},[7043],{"type":38,"value":7044},"Art. 26",{"type":38,"value":7046},", high-risk deployers (from 2 Dec 2027 for Annex III):\n",{"type":29,"tag":297,"props":7048,"children":7049},{},[7050,7055,7060,7065,7070,7080,7085,7090,7095],{"type":29,"tag":136,"props":7051,"children":7052},{},[7053],{"type":38,"value":7054},"use per instructions (26(1));",{"type":29,"tag":136,"props":7056,"children":7057},{},[7058],{"type":38,"value":7059},"assign competent human oversight (26(2));",{"type":29,"tag":136,"props":7061,"children":7062},{},[7063],{"type":38,"value":7064},"ensure input data is relevant and representative where under the deployer's control (26(4));",{"type":29,"tag":136,"props":7066,"children":7067},{},[7068],{"type":38,"value":7069},"monitor operation and inform the provider or authorities of risks and serious incidents (26(5));",{"type":29,"tag":136,"props":7071,"children":7072},{},[7073,7078],{"type":29,"tag":34,"props":7074,"children":7075},{},[7076],{"type":38,"value":7077},"keep automatically generated logs under their control for ≥6 months",{"type":38,"value":7079}," (26(6));",{"type":29,"tag":136,"props":7081,"children":7082},{},[7083],{"type":38,"value":7084},"inform worker representatives before workplace use (26(7));",{"type":29,"tag":136,"props":7086,"children":7087},{},[7088],{"type":38,"value":7089},"public-authority registration (26(8));",{"type":29,"tag":136,"props":7091,"children":7092},{},[7093],{"type":38,"value":7094},"use provider information for the DPIA (26(9));",{"type":29,"tag":136,"props":7096,"children":7097},{},[7098],{"type":38,"value":7099},"inform affected persons (26(11)).",{"type":29,"tag":136,"props":7101,"children":7102},{},[7103,7108],{"type":29,"tag":34,"props":7104,"children":7105},{},[7106],{"type":38,"value":7107},"Art. 27",{"type":38,"value":7109},", fundamental-rights impact assessment (public bodies and certain credit\u002Finsurance deployers).",{"type":29,"tag":136,"props":7111,"children":7112},{},[7113,7118,7120,7125],{"type":29,"tag":34,"props":7114,"children":7115},{},[7116],{"type":38,"value":7117},"Art. 50(3)–(4)",{"type":38,"value":7119},", from 2 Aug 2026: deployers must inform people exposed to emotion-recognition or biometric categorisation, disclose deepfakes, and disclose AI-generated text published on matters of public interest (unless human-edited under editorial responsibility). ",{"type":29,"tag":34,"props":7121,"children":7122},{},[7123],{"type":38,"value":7124},"Art. 50(1)–(2)",{"type":38,"value":7126}," are provider duties: chatbot disclosure and synthetic-content marking.",{"type":29,"tag":136,"props":7128,"children":7129},{},[7130,7135],{"type":29,"tag":34,"props":7131,"children":7132},{},[7133],{"type":38,"value":7134},"Art. 86",{"type":38,"value":7136},", right to explanation for decisions based on high-risk systems.",{"type":29,"tag":30,"props":7138,"children":7139},{},[7140,7145,7147],{"type":29,"tag":34,"props":7141,"children":7142},{},[7143],{"type":38,"value":7144},"Penalties (Art. 99):",{"type":38,"value":7146}," up to €35m or 7% for Art. 5 breaches, €15m or 3% for most other operator obligations (incl. Art. 26 and Art. 50), and €7.5m or 1% for misleading information. ",{"type":29,"tag":63,"props":7148,"children":7149},{},[7150],{"type":38,"value":7151},"K; S",{"type":29,"tag":290,"props":7153,"children":7155},{"id":7154},"c-who-asks-and-why-6",[7156],{"type":38,"value":843},{"type":29,"tag":297,"props":7158,"children":7159},{},[7160,7170,7180,7190],{"type":29,"tag":136,"props":7161,"children":7162},{},[7163,7168],{"type":29,"tag":34,"props":7164,"children":7165},{},[7166],{"type":38,"value":7167},"Regulators:",{"type":38,"value":7169}," national market-surveillance authorities, the AI Office for GPAI, and DPAs where personal data is involved.",{"type":29,"tag":136,"props":7171,"children":7172},{},[7173,7178],{"type":29,"tag":34,"props":7174,"children":7175},{},[7176],{"type":38,"value":7177},"EU customers' legal and compliance teams",{"type":38,"value":7179},", who need to know which AI systems they deploy, in which tier, and whether anything falls into prohibited or Annex III territory. Examples: AI used in HR screening (Annex III point 4) or in credit scoring.",{"type":29,"tag":136,"props":7181,"children":7182},{},[7183,7188],{"type":29,"tag":34,"props":7184,"children":7185},{},[7186],{"type":38,"value":7187},"Works councils",{"type":38,"value":7189}," (Art. 26(7)).",{"type":29,"tag":136,"props":7191,"children":7192},{},[7193],{"type":29,"tag":34,"props":7194,"children":7195},{},[7196],{"type":38,"value":7197},"Buyers asking vendors for AI Act readiness statements.",{"type":29,"tag":290,"props":7199,"children":7201},{"id":7200},"d-how-evidence-works-6",[7202],{"type":38,"value":877},{"type":29,"tag":297,"props":7204,"children":7205},{},[7206,7216,7230],{"type":29,"tag":136,"props":7207,"children":7208},{},[7209,7214],{"type":29,"tag":34,"props":7210,"children":7211},{},[7212],{"type":38,"value":7213},"Providers of high-risk systems:",{"type":38,"value":7215}," conformity assessment (internal control under Annex VI, or notified body under Annex VII), technical documentation (Annex IV), QMS (Art. 17), CE marking, EU declaration of conformity and EU database registration.",{"type":29,"tag":136,"props":7217,"children":7218},{},[7219,7224,7226],{"type":29,"tag":34,"props":7220,"children":7221},{},[7222],{"type":38,"value":7223},"Harmonised standards",{"type":38,"value":7225}," (CEN-CENELEC JTC 21) were not ready, which was a stated reason for the delay. ",{"type":29,"tag":63,"props":7227,"children":7228},{},[7229],{"type":38,"value":77},{"type":29,"tag":136,"props":7231,"children":7232},{},[7233,7238,7240,7245],{"type":29,"tag":34,"props":7234,"children":7235},{},[7236],{"type":38,"value":7237},"Deployers:",{"type":38,"value":7239}," no certification. They need ",{"type":29,"tag":101,"props":7241,"children":7242},{},[7243],{"type":38,"value":7244},"documented",{"type":38,"value":7246}," compliance available to authorities on request: AI-system register and classification rationale, literacy programme records, oversight assignments, logs (≥6 months), FRIA where required, and transparency notices.",{"type":29,"tag":290,"props":7248,"children":7250},{"id":7249},"e-what-qpoint-can-evidence-4",[7251],{"type":38,"value":896},{"type":29,"tag":440,"props":7253,"children":7254},{},[7255,7274],{"type":29,"tag":444,"props":7256,"children":7257},{},[7258],{"type":29,"tag":448,"props":7259,"children":7260},{},[7261,7266,7270],{"type":29,"tag":452,"props":7262,"children":7263},{},[7264],{"type":38,"value":7265},"Obligation",{"type":29,"tag":452,"props":7267,"children":7268},{},[7269],{"type":38,"value":915},{"type":29,"tag":452,"props":7271,"children":7272},{},[7273],{"type":38,"value":920},{"type":29,"tag":468,"props":7275,"children":7276},{},[7277,7302,7330,7352,7381,7403,7432,7454],{"type":29,"tag":448,"props":7278,"children":7279},{},[7280,7290,7297],{"type":29,"tag":475,"props":7281,"children":7282},{},[7283,7288],{"type":29,"tag":34,"props":7284,"children":7285},{},[7286],{"type":38,"value":7287},"Inventory and classification baseline",{"type":38,"value":7289}," (prerequisite for every role and tier decision; Art. 3\u002F6\u002F25 analysis)",{"type":29,"tag":475,"props":7291,"children":7292},{},[7293],{"type":29,"tag":34,"props":7294,"children":7295},{},[7296],{"type":38,"value":939},{"type":29,"tag":475,"props":7298,"children":7299},{},[7300],{"type":38,"value":7301},"Discovery of all AI systems and GPAI-based tools in use, by team, user and data class. It is the input for \"is any use prohibited or Annex III?\" and \"did we become a provider under Art. 25?\"",{"type":29,"tag":448,"props":7303,"children":7304},{},[7305,7314,7318],{"type":29,"tag":475,"props":7306,"children":7307},{},[7308,7312],{"type":29,"tag":34,"props":7309,"children":7310},{},[7311],{"type":38,"value":6962},{"type":38,"value":7313}," AI literacy",{"type":29,"tag":475,"props":7315,"children":7316},{},[7317],{"type":38,"value":1001},{"type":29,"tag":475,"props":7319,"children":7320},{},[7321,7323,7328],{"type":38,"value":7322},"Shows ",{"type":29,"tag":101,"props":7324,"children":7325},{},[7326],{"type":38,"value":7327},"who uses which AI tools",{"type":38,"value":7329},", so literacy can be targeted, and gives coverage metrics. Does not evidence training itself.",{"type":29,"tag":448,"props":7331,"children":7332},{},[7333,7343,7347],{"type":29,"tag":475,"props":7334,"children":7335},{},[7336,7341],{"type":29,"tag":34,"props":7337,"children":7338},{},[7339],{"type":38,"value":7340},"Art. 5",{"type":38,"value":7342}," prohibited practices",{"type":29,"tag":475,"props":7344,"children":7345},{},[7346],{"type":38,"value":1001},{"type":29,"tag":475,"props":7348,"children":7349},{},[7350],{"type":38,"value":7351},"Detects use of tools or providers associated with prohibited categories (e.g., emotion-recognition APIs in the workplace). Detection only.",{"type":29,"tag":448,"props":7353,"children":7354},{},[7355,7372,7376],{"type":29,"tag":475,"props":7356,"children":7357},{},[7358,7363,7365,7370],{"type":29,"tag":34,"props":7359,"children":7360},{},[7361],{"type":38,"value":7362},"Art. 26(5)",{"type":38,"value":7364}," monitor operation \u002F ",{"type":29,"tag":34,"props":7366,"children":7367},{},[7368],{"type":38,"value":7369},"26(6)",{"type":38,"value":7371}," keep logs ≥6 months",{"type":29,"tag":475,"props":7373,"children":7374},{},[7375],{"type":38,"value":960},{"type":29,"tag":475,"props":7377,"children":7378},{},[7379],{"type":38,"value":7380},"Deployer-side interaction logs for high-risk tools that pass through the network, with retention ≥6 months. Provider-generated logs are separate.",{"type":29,"tag":448,"props":7382,"children":7383},{},[7384,7394,7398],{"type":29,"tag":475,"props":7385,"children":7386},{},[7387,7392],{"type":29,"tag":34,"props":7388,"children":7389},{},[7390],{"type":38,"value":7391},"Art. 26(4)",{"type":38,"value":7393}," input data relevance (when under deployer control)",{"type":29,"tag":475,"props":7395,"children":7396},{},[7397],{"type":38,"value":1001},{"type":29,"tag":475,"props":7399,"children":7400},{},[7401],{"type":38,"value":7402},"Evidence of what data is fed to which system, plus redaction policies.",{"type":29,"tag":448,"props":7404,"children":7405},{},[7406,7423,7427],{"type":29,"tag":475,"props":7407,"children":7408},{},[7409,7414,7416,7421],{"type":29,"tag":34,"props":7410,"children":7411},{},[7412],{"type":38,"value":7413},"Art. 26(1)",{"type":38,"value":7415}," use per instructions \u002F ",{"type":29,"tag":34,"props":7417,"children":7418},{},[7419],{"type":38,"value":7420},"26(2)",{"type":38,"value":7422}," human oversight",{"type":29,"tag":475,"props":7424,"children":7425},{},[7426],{"type":38,"value":1063},{"type":29,"tag":475,"props":7428,"children":7429},{},[7430],{"type":38,"value":7431},"Can enforce \"only approved configurations or providers\"; oversight is organisational.",{"type":29,"tag":448,"props":7433,"children":7434},{},[7435,7445,7449],{"type":29,"tag":475,"props":7436,"children":7437},{},[7438,7443],{"type":29,"tag":34,"props":7439,"children":7440},{},[7441],{"type":38,"value":7442},"Art. 50(3)\u002F(4)",{"type":38,"value":7444}," disclosure",{"type":29,"tag":475,"props":7446,"children":7447},{},[7448],{"type":38,"value":1247},{"type":29,"tag":475,"props":7450,"children":7451},{},[7452],{"type":38,"value":7453},"Content and UX obligations.",{"type":29,"tag":448,"props":7455,"children":7456},{},[7457,7465,7472],{"type":29,"tag":475,"props":7458,"children":7459},{},[7460],{"type":29,"tag":34,"props":7461,"children":7462},{},[7463],{"type":38,"value":7464},"GPAI provider obligations, Art. 9–17 provider obligations, conformity assessment",{"type":29,"tag":475,"props":7466,"children":7467},{},[7468],{"type":29,"tag":34,"props":7469,"children":7470},{},[7471],{"type":38,"value":1247},{"type":29,"tag":475,"props":7473,"children":7474},{},[7475],{"type":38,"value":7476},"Provider-side.",{"type":29,"tag":30,"props":7478,"children":7479},{},[7480,7484],{"type":29,"tag":34,"props":7481,"children":7482},{},[7483],{"type":38,"value":1260},{"type":38,"value":7485}," FRIA content, classification judgement, technical documentation, model development and training data (Art. 10), and transparency notices.",{"type":29,"tag":290,"props":7487,"children":7489},{"id":7488},"f-crosswalks-4",[7490],{"type":38,"value":1268},{"type":29,"tag":297,"props":7492,"children":7493},{},[7494,7510],{"type":29,"tag":136,"props":7495,"children":7496},{},[7497,7499,7503,7505,7509],{"type":38,"value":7498},"No official Commission crosswalk to standards exists. Harmonised standards are pending at CEN-CENELEC JTC 21 ",{"type":29,"tag":63,"props":7500,"children":7501},{},[7502],{"type":38,"value":77},{"type":38,"value":7504},". The GPAI Code of Practice (Jul 2025) is the official GPAI compliance instrument ",{"type":29,"tag":63,"props":7506,"children":7507},{},[7508],{"type":38,"value":87},{"type":38,"value":120},{"type":29,"tag":136,"props":7511,"children":7512},{},[7513,7515,7520,7522,7526,7528,7533,7535,7539,7541,7545],{"type":38,"value":7514},"Unofficial and industry crosswalks: ",{"type":29,"tag":34,"props":7516,"children":7517},{},[7518],{"type":38,"value":7519},"CSA AICM→EU AI Act",{"type":38,"value":7521}," (official CSA download) ",{"type":29,"tag":63,"props":7523,"children":7524},{},[7525],{"type":38,"value":67},{"type":38,"value":7527},"; ",{"type":29,"tag":34,"props":7529,"children":7530},{},[7531],{"type":38,"value":7532},"AIUC-1→EU AI Act",{"type":38,"value":7534}," at article level ",{"type":29,"tag":63,"props":7536,"children":7537},{},[7538],{"type":38,"value":67},{"type":38,"value":7540},"; NIST AIRC hosts EU AI Act-related crosswalks ",{"type":29,"tag":63,"props":7542,"children":7543},{},[7544],{"type":38,"value":77},{"type":38,"value":120},{"type":29,"tag":30,"props":7547,"children":7548},{},[7549,7553,7554,7560,7561,7567,7568,7574,7575,7581,7582,7588,7589,7595,7596,7602,7603,7609],{"type":29,"tag":34,"props":7550,"children":7551},{},[7552],{"type":38,"value":1351},{"type":38,"value":354},{"type":29,"tag":1354,"props":7555,"children":7558},{"href":7556,"rel":7557},"https:\u002F\u002Feur-lex.europa.eu\u002Feli\u002Freg\u002F2026\u002F1744\u002Foj",[1358],[7559],{"type":38,"value":7556},{"type":38,"value":1362},{"type":29,"tag":1354,"props":7562,"children":7565},{"href":7563,"rel":7564},"https:\u002F\u002Feur-lex.europa.eu\u002Feli\u002Freg\u002F2024\u002F1689\u002Foj",[1358],[7566],{"type":38,"value":7563},{"type":38,"value":1362},{"type":29,"tag":1354,"props":7569,"children":7572},{"href":7570,"rel":7571},"https:\u002F\u002Ffpf.org\u002Fblog\u002Fthe-ai-act-implementation-timeline-what-changes-under-the-ai-omnibus\u002F",[1358],[7573],{"type":38,"value":7570},{"type":38,"value":1362},{"type":29,"tag":1354,"props":7576,"children":7579},{"href":7577,"rel":7578},"https:\u002F\u002Fwww.gibsondunn.com\u002Feu-ai-act-omnibus-agreement-postponed-high-risk-deadlines-and-other-key-changes\u002F",[1358],[7580],{"type":38,"value":7577},{"type":38,"value":1362},{"type":29,"tag":1354,"props":7583,"children":7586},{"href":7584,"rel":7585},"https:\u002F\u002Fwww.joneswalker.com\u002Fen\u002Finsights\u002Fblogs\u002Fai-law-blog\u002Fyes-august-2-still-matters-the-eu-approved-a-high-risk-ai-delay-but-most-trans.html",[1358],[7587],{"type":38,"value":7584},{"type":38,"value":1362},{"type":29,"tag":1354,"props":7590,"children":7593},{"href":7591,"rel":7592},"https:\u002F\u002Flabs.cloudsecurityalliance.org\u002Fresearch\u002Fcsa-research-note-eu-ai-act-high-risk-deadline-omnibus-20260\u002F",[1358],[7594],{"type":38,"value":7591},{"type":38,"value":1362},{"type":29,"tag":1354,"props":7597,"children":7600},{"href":7598,"rel":7599},"https:\u002F\u002Fertico.com\u002Fdigital-omnibus-on-ai-enters-into-force",[1358],[7601],{"type":38,"value":7598},{"type":38,"value":1362},{"type":29,"tag":1354,"props":7604,"children":7607},{"href":7605,"rel":7606},"https:\u002F\u002Fusercentrics.com\u002Fknowledge-hub\u002Feu-digital-omnibus-package\u002F",[1358],[7608],{"type":38,"value":7605},{"type":38,"value":7610}," (data\u002FGDPR omnibus status). digital-strategy.ec.europa.eu returned 403 to automated fetch.",{"type":29,"tag":280,"props":7612,"children":7613},{},[],{"type":29,"tag":284,"props":7615,"children":7617},{"id":7616},"_8-eu-cyber-resilience-act-cra-regulation-eu-20242847",[7618],{"type":38,"value":20},{"type":29,"tag":290,"props":7620,"children":7622},{"id":7621},"a-identity-and-status-7",[7623],{"type":38,"value":295},{"type":29,"tag":297,"props":7625,"children":7626},{},[7627,7641,7707,7716],{"type":29,"tag":136,"props":7628,"children":7629},{},[7630,7634,7635,7639],{"type":29,"tag":34,"props":7631,"children":7632},{},[7633],{"type":38,"value":380},{"type":38,"value":354},{"type":29,"tag":34,"props":7636,"children":7637},{},[7638],{"type":38,"value":6559},{"type":38,"value":7640}," (product cybersecurity regulation, with CE marking).",{"type":29,"tag":136,"props":7642,"children":7643},{},[7644,7649],{"type":29,"tag":34,"props":7645,"children":7646},{},[7647],{"type":38,"value":7648},"Dates:",{"type":29,"tag":297,"props":7650,"children":7651},{},[7652,7661,7670,7692],{"type":29,"tag":136,"props":7653,"children":7654},{},[7655,7657],{"type":38,"value":7656},"Entered into force 10 Dec 2024. ",{"type":29,"tag":63,"props":7658,"children":7659},{},[7660],{"type":38,"value":87},{"type":29,"tag":136,"props":7662,"children":7663},{},[7664,7666],{"type":38,"value":7665},"Conformity-assessment body (notified body) provisions apply from 11 Jun 2026. ",{"type":29,"tag":63,"props":7667,"children":7668},{},[7669],{"type":38,"value":87},{"type":29,"tag":136,"props":7671,"children":7672},{},[7673,7678,7680,7685,7687],{"type":29,"tag":34,"props":7674,"children":7675},{},[7676],{"type":38,"value":7677},"Art. 14 reporting obligations have applied since 11 Sep 2026.",{"type":38,"value":7679}," ENISA's ",{"type":29,"tag":34,"props":7681,"children":7682},{},[7683],{"type":38,"value":7684},"Single Reporting Platform (SRP)",{"type":38,"value":7686}," went live the same day. ",{"type":29,"tag":63,"props":7688,"children":7689},{},[7690],{"type":38,"value":7691},"S: Crowell, McCann FitzGerald, Irish NCSC, CSA note",{"type":29,"tag":136,"props":7693,"children":7694},{},[7695,7697,7702,7703],{"type":38,"value":7696},"Full application is ",{"type":29,"tag":34,"props":7698,"children":7699},{},[7700],{"type":38,"value":7701},"11 Dec 2027",{"type":38,"value":1545},{"type":29,"tag":63,"props":7704,"children":7705},{},[7706],{"type":38,"value":77},{"type":29,"tag":136,"props":7708,"children":7709},{},[7710,7712],{"type":38,"value":7711},"Reporting applies to products already on the market (Art. 69(3)). ",{"type":29,"tag":63,"props":7713,"children":7714},{},[7715],{"type":38,"value":87},{"type":29,"tag":136,"props":7717,"children":7718},{},[7719,7721,7726,7727],{"type":38,"value":7720},"The Digital Omnibus (data\u002FNIS2) proposal would fold CRA reporting into a wider single entry point, but ",{"type":29,"tag":34,"props":7722,"children":7723},{},[7724],{"type":38,"value":7725},"it is not adopted",{"type":38,"value":1545},{"type":29,"tag":63,"props":7728,"children":7729},{},[7730],{"type":38,"value":77},{"type":29,"tag":290,"props":7732,"children":7734},{"id":7733},"b-native-structure-5",[7735],{"type":38,"value":423},{"type":29,"tag":297,"props":7737,"children":7738},{},[7739,7765,7781,7805,7833,7854],{"type":29,"tag":136,"props":7740,"children":7741},{},[7742,7744,7749,7751,7756,7758,7763],{"type":38,"value":7743},"Obligations fall on ",{"type":29,"tag":34,"props":7745,"children":7746},{},[7747],{"type":38,"value":7748},"manufacturers",{"type":38,"value":7750}," (Art. 13–14), ",{"type":29,"tag":34,"props":7752,"children":7753},{},[7754],{"type":38,"value":7755},"importers and distributors",{"type":38,"value":7757}," (Art. 19–20) and ",{"type":29,"tag":34,"props":7759,"children":7760},{},[7761],{"type":38,"value":7762},"open-source software stewards",{"type":38,"value":7764}," (Art. 24).",{"type":29,"tag":136,"props":7766,"children":7767},{},[7768,7772,7774,7779],{"type":29,"tag":34,"props":7769,"children":7770},{},[7771],{"type":38,"value":6935},{"type":38,"value":7773}," sets essential requirements: Part I covers product security properties; Part II covers vulnerability handling, including an ",{"type":29,"tag":34,"props":7775,"children":7776},{},[7777],{"type":38,"value":7778},"SBOM",{"type":38,"value":7780},", coordinated vulnerability disclosure and security updates.",{"type":29,"tag":136,"props":7782,"children":7783},{},[7784,7789,7791,7796,7798,7803],{"type":29,"tag":34,"props":7785,"children":7786},{},[7787],{"type":38,"value":7788},"Product classes:",{"type":38,"value":7790}," default (self-assessment), ",{"type":29,"tag":34,"props":7792,"children":7793},{},[7794],{"type":38,"value":7795},"important Class I\u002FII",{"type":38,"value":7797}," (Annex III) and ",{"type":29,"tag":34,"props":7799,"children":7800},{},[7801],{"type":38,"value":7802},"critical",{"type":38,"value":7804}," (Annex IV).",{"type":29,"tag":136,"props":7806,"children":7807},{},[7808,7813],{"type":29,"tag":34,"props":7809,"children":7810},{},[7811],{"type":38,"value":7812},"Art. 14 reporting:",{"type":29,"tag":297,"props":7814,"children":7815},{},[7816,7828],{"type":29,"tag":136,"props":7817,"children":7818},{},[7819,7821,7826],{"type":38,"value":7820},"actively exploited vulnerabilities and severe incidents: ",{"type":29,"tag":34,"props":7822,"children":7823},{},[7824],{"type":38,"value":7825},"early warning within 24 h, notification within 72 h",{"type":38,"value":7827},";",{"type":29,"tag":136,"props":7829,"children":7830},{},[7831],{"type":38,"value":7832},"final report within 14 days of a fix for vulnerabilities, or 1 month for incidents.",{"type":29,"tag":136,"props":7834,"children":7835},{},[7836,7841,7843,7848,7850],{"type":29,"tag":34,"props":7837,"children":7838},{},[7839],{"type":38,"value":7840},"Scope:",{"type":38,"value":7842}," \"products with digital elements\", meaning hardware and software including ",{"type":29,"tag":34,"props":7844,"children":7845},{},[7846],{"type":38,"value":7847},"remote data processing solutions integral to the product",{"type":38,"value":7849},". Pure SaaS is out of scope (NIS2 covers it). ",{"type":29,"tag":63,"props":7851,"children":7852},{},[7853],{"type":38,"value":87},{"type":29,"tag":136,"props":7855,"children":7856},{},[7857,7862,7864,7869,7871],{"type":29,"tag":34,"props":7858,"children":7859},{},[7860],{"type":38,"value":7861},"AI link:",{"type":38,"value":7863}," CRA ",{"type":29,"tag":34,"props":7865,"children":7866},{},[7867],{"type":38,"value":7868},"Art. 12",{"type":38,"value":7870},". High-risk AI systems that meet CRA essential requirements are presumed to meet AI Act Art. 15 cybersecurity requirements. ",{"type":29,"tag":63,"props":7872,"children":7873},{},[7874],{"type":38,"value":77},{"type":29,"tag":290,"props":7876,"children":7878},{"id":7877},"c-who-asks-and-why-7",[7879],{"type":38,"value":843},{"type":29,"tag":297,"props":7881,"children":7882},{},[7883,7888,7893],{"type":29,"tag":136,"props":7884,"children":7885},{},[7886],{"type":38,"value":7887},"EU market-surveillance authorities, CSIRTs and ENISA.",{"type":29,"tag":136,"props":7889,"children":7890},{},[7891],{"type":38,"value":7892},"Customers procuring software sold in the EU.",{"type":29,"tag":136,"props":7894,"children":7895},{},[7896,7898],{"type":38,"value":7897},"Relevance to AI tooling comes in three layers:\n",{"type":29,"tag":132,"props":7899,"children":7900},{},[7901,7923,7935],{"type":29,"tag":136,"props":7902,"children":7903},{},[7904,7906,7911,7913,7917,7919],{"type":38,"value":7905},"AI coding agents, desktop AI apps, CLI harnesses and distributable MCP servers are ",{"type":29,"tag":34,"props":7907,"children":7908},{},[7909],{"type":38,"value":7910},"products with digital elements",{"type":38,"value":7912},". Their ",{"type":29,"tag":101,"props":7914,"children":7915},{},[7916],{"type":38,"value":7748},{"type":38,"value":7918}," carry CRA duties, and agent-written code gets no exemption. ",{"type":29,"tag":63,"props":7920,"children":7921},{},[7922],{"type":38,"value":77},{"type":29,"tag":136,"props":7924,"children":7925},{},[7926,7928,7933],{"type":38,"value":7927},"Software manufacturers who ",{"type":29,"tag":101,"props":7929,"children":7930},{},[7931],{"type":38,"value":7932},"use",{"type":38,"value":7934}," coding agents still carry Annex I secure-development and SBOM duties for what they ship.",{"type":29,"tag":136,"props":7936,"children":7937},{},[7938,7943,7945,7950,7952],{"type":29,"tag":34,"props":7939,"children":7940},{},[7941],{"type":38,"value":7942},"Qpoint's own endpoint\u002FeBPF agent is a product with digital elements",{"type":38,"value":7944}," placed on the EU market. ",{"type":29,"tag":34,"props":7946,"children":7947},{},[7948],{"type":38,"value":7949},"Qpoint itself must meet the CRA",{"type":38,"value":7951}," by 11 Dec 2027 and report exploited vulnerabilities now. Whether its blocking or enforcement functions push it into an Annex III \"important\" class (e.g., network-security or firewall-like categories) needs legal analysis. ",{"type":29,"tag":34,"props":7953,"children":7954},{},[7955],{"type":29,"tag":63,"props":7956,"children":7957},{},[7958],{"type":38,"value":97},{"type":29,"tag":290,"props":7960,"children":7962},{"id":7961},"d-how-evidence-works-7",[7963],{"type":38,"value":877},{"type":29,"tag":297,"props":7965,"children":7966},{},[7967,7972],{"type":29,"tag":136,"props":7968,"children":7969},{},[7970],{"type":38,"value":7971},"Manufacturers do a conformity assessment by product class: self-assessment (module A) for default products, harmonised standards or third-party assessment for important and critical classes.",{"type":29,"tag":136,"props":7973,"children":7974},{},[7975],{"type":38,"value":7976},"They also produce technical documentation, an EU declaration of conformity, an SBOM, vulnerability-handling records and Art. 14 reports through the SRP.",{"type":29,"tag":290,"props":7978,"children":7980},{"id":7979},"e-what-qpoint-can-evidence-for-customers-who-are-software-manufacturers",[7981],{"type":38,"value":7982},"(e) What Qpoint can evidence (for customers who are software manufacturers)",{"type":29,"tag":297,"props":7984,"children":7985},{},[7986,8003,8012],{"type":29,"tag":136,"props":7987,"children":7988},{},[7989,7994,7996,8001],{"type":29,"tag":34,"props":7990,"children":7991},{},[7992],{"type":38,"value":7993},"Partial:",{"type":38,"value":7995}," an inventory of AI agents, models and MCP servers used ",{"type":29,"tag":101,"props":7997,"children":7998},{},[7999],{"type":38,"value":8000},"in the development environment",{"type":38,"value":8002},", i.e. an \"AI-tooling BOM\" feeding the dev-toolchain record. Detection of which agent touched which repos and destinations. Redaction preventing secrets leaking to AI providers, which supports Annex I Part I confidentiality.",{"type":29,"tag":136,"props":8004,"children":8005},{},[8006,8010],{"type":29,"tag":34,"props":8007,"children":8008},{},[8009],{"type":38,"value":7993},{"type":38,"value":8011}," incident-detection signals (e.g., an agent compromise or anomalous exfiltration) feeding the 24 h \u002F 72 h reporting clock.",{"type":29,"tag":136,"props":8013,"children":8014},{},[8015,8020],{"type":29,"tag":34,"props":8016,"children":8017},{},[8018],{"type":38,"value":8019},"None:",{"type":38,"value":8021}," product SBOMs, vulnerability handling of the shipped product, conformity assessment and CE marking.",{"type":29,"tag":290,"props":8023,"children":8025},{"id":8024},"f-crosswalks-5",[8026],{"type":38,"value":1268},{"type":29,"tag":297,"props":8028,"children":8029},{},[8030,8046],{"type":29,"tag":136,"props":8031,"children":8032},{},[8033,8035,8039,8041,8045],{"type":38,"value":8034},"Harmonised standards are in development by CEN-CENELEC ",{"type":29,"tag":63,"props":8036,"children":8037},{},[8038],{"type":38,"value":87},{"type":38,"value":8040},". The CRA↔AI Act link is statutory (Art. 12) ",{"type":29,"tag":63,"props":8042,"children":8043},{},[8044],{"type":38,"value":77},{"type":38,"value":120},{"type":29,"tag":136,"props":8047,"children":8048},{},[8049,8051],{"type":38,"value":8050},"No AI-framework crosswalk to the CRA was found. ",{"type":29,"tag":34,"props":8052,"children":8053},{},[8054],{"type":29,"tag":63,"props":8055,"children":8056},{},[8057],{"type":38,"value":97},{"type":29,"tag":30,"props":8059,"children":8060},{},[8061,8065,8066,8072,8073,8079,8080,8086,8087,8093,8094,8100,8101,8107,8108],{"type":29,"tag":34,"props":8062,"children":8063},{},[8064],{"type":38,"value":1351},{"type":38,"value":354},{"type":29,"tag":1354,"props":8067,"children":8070},{"href":8068,"rel":8069},"https:\u002F\u002Fwww.crowell.com\u002Fen\u002Finsights\u002Fclient-alerts\u002Fits-live-the-cyber-resilience-act-reporting-is-mandatory-as-of-today-11-september-2026",[1358],[8071],{"type":38,"value":8068},{"type":38,"value":1362},{"type":29,"tag":1354,"props":8074,"children":8077},{"href":8075,"rel":8076},"https:\u002F\u002Fwww.mccannfitzgerald.com\u002Fknowledge\u002Fdata-privacy-and-cyber-risk\u002Fcyber-resilience-act-reporting-obligations-apply-from-11-september-2026",[1358],[8078],{"type":38,"value":8075},{"type":38,"value":1362},{"type":29,"tag":1354,"props":8081,"children":8084},{"href":8082,"rel":8083},"https:\u002F\u002Fncsc.gov.ie\u002Fcra\u002F",[1358],[8085],{"type":38,"value":8082},{"type":38,"value":1362},{"type":29,"tag":1354,"props":8088,"children":8091},{"href":8089,"rel":8090},"https:\u002F\u002Flabs.cloudsecurityalliance.org\u002Fwp-content\u002Fuploads\u002F2026\u002F09\u002FCSA_research_note_cra_single_reporting_platform_20260916-csa-styled.pdf",[1358],[8092],{"type":38,"value":8089},{"type":38,"value":1362},{"type":29,"tag":1354,"props":8095,"children":8098},{"href":8096,"rel":8097},"https:\u002F\u002Fwww.taylorwessing.com\u002Ffr\u002Finsights-and-events\u002Finsights\u002F2025\u002F12\u002Fartificial-intelligence-in-the-regulatory-jungle-of-cybersecurity-law",[1358],[8099],{"type":38,"value":8096},{"type":38,"value":1362},{"type":29,"tag":1354,"props":8102,"children":8105},{"href":8103,"rel":8104},"https:\u002F\u002Finquisitiveminds.bristows.com\u002Fpost\u002F102lxlm\u002Fdoes-the-cyber-resilience-act-outlaw-ai-vibe-coding",[1358],[8106],{"type":38,"value":8103},{"type":38,"value":1362},{"type":29,"tag":1354,"props":8109,"children":8112},{"href":8110,"rel":8111},"https:\u002F\u002Fwww.hunton.com\u002Fprivacy-and-information-security-law\u002Feu-digital-omnibus-introduces-a-single-reporting-point-for-cybersecurity-incidents",[1358],[8113],{"type":38,"value":8110},{"type":29,"tag":280,"props":8115,"children":8116},{},[],{"type":29,"tag":284,"props":8118,"children":8120},{"id":8119},"_9-hitrust-csf-and-hitrust-ai-assessments",[8121],{"type":38,"value":21},{"type":29,"tag":290,"props":8123,"children":8125},{"id":8124},"a-identity-and-status-8",[8126],{"type":38,"value":295},{"type":29,"tag":297,"props":8128,"children":8129},{},[8130,8139,8198,8213,8353,8374],{"type":29,"tag":136,"props":8131,"children":8132},{},[8133,8137],{"type":29,"tag":34,"props":8134,"children":8135},{},[8136],{"type":38,"value":307},{"type":38,"value":8138}," HITRUST Alliance.",{"type":29,"tag":136,"props":8140,"children":8141},{},[8142,8147,8149,8153],{"type":29,"tag":34,"props":8143,"children":8144},{},[8145],{"type":38,"value":8146},"CSF v11.9.0 was released on 24 Sep 2026",{"type":38,"value":8148}," (advisory HAA 2026-005). ",{"type":29,"tag":63,"props":8150,"children":8151},{},[8152],{"type":38,"value":67},{"type":29,"tag":297,"props":8154,"children":8155},{},[8156,8174,8179,8189],{"type":29,"tag":136,"props":8157,"children":8158},{},[8159,8161,8166,8168,8173],{"type":38,"value":8160},"It adds a mapping to the ",{"type":29,"tag":34,"props":8162,"children":8163},{},[8164],{"type":38,"value":8165},"OWASP Top 10 for Agentic Applications 2026",{"type":38,"value":8167}," with a selectable compliance factor, and an ",{"type":29,"tag":34,"props":8169,"children":8170},{},[8171],{"type":38,"value":8172},"\"Agentic AI\" selectable factor for the AI Security Certification",{"type":38,"value":120},{"type":29,"tag":136,"props":8175,"children":8176},{},[8177],{"type":38,"value":8178},"It updates AI Security content, refreshes the SP 800-53 Rev 5.2.0 mapping, adds post-quantum crypto considerations, and grows the e1 baseline to 44 statements (i1 stays at 182).",{"type":29,"tag":136,"props":8180,"children":8181},{},[8182,8184],{"type":38,"value":8183},"From 31 Dec 2026, new e1 and i1 assessments must use v11.9.0 (HAA 2026-006). ",{"type":29,"tag":63,"props":8185,"children":8186},{},[8187],{"type":38,"value":8188},"S\u002FV",{"type":29,"tag":136,"props":8190,"children":8191},{},[8192,8194],{"type":38,"value":8193},"The previous release was v11.8.0 (May 2026; added LLM and AI mappings). ",{"type":29,"tag":63,"props":8195,"children":8196},{},[8197],{"type":38,"value":77},{"type":29,"tag":136,"props":8199,"children":8200},{},[8201,8205,8206,8211],{"type":29,"tag":34,"props":8202,"children":8203},{},[8204],{"type":38,"value":380},{"type":38,"value":382},{"type":29,"tag":34,"props":8207,"children":8208},{},[8209],{"type":38,"value":8210},"certifiable controls framework",{"type":38,"value":8212},". HITRUST issues the certifications after testing by an Authorized External Assessor and quality review by HITRUST.",{"type":29,"tag":136,"props":8214,"children":8215},{},[8216,8221,8223,8227],{"type":29,"tag":34,"props":8217,"children":8218},{},[8219],{"type":38,"value":8220},"HITRUST AI Security Assessment & Certification",{"type":38,"value":8222}," was launched Dec 2024 and introduced as a compliance factor in CSF v11.4.0. ",{"type":29,"tag":63,"props":8224,"children":8225},{},[8226],{"type":38,"value":3700},{"type":29,"tag":297,"props":8228,"children":8229},{},[8230,8264,8273,8302,8322,8344],{"type":29,"tag":136,"props":8231,"children":8232},{},[8233,8235,8240,8242,8247,8249,8254,8256],{"type":38,"value":8234},"It covers ",{"type":29,"tag":34,"props":8236,"children":8237},{},[8238],{"type":38,"value":8239},"up to 44 AI requirement statements",{"type":38,"value":8241}," at v11.4.0 ",{"type":29,"tag":63,"props":8243,"children":8244},{},[8245],{"type":38,"value":8246},"V: help page",{"type":38,"value":8248},". A recent HITRUST press release reportedly cites ",{"type":29,"tag":34,"props":8250,"children":8251},{},[8252],{"type":38,"value":8253},"55",{"type":38,"value":8255}," harmonised AI controls tied to v11.9. ",{"type":29,"tag":34,"props":8257,"children":8258},{},[8259],{"type":29,"tag":63,"props":8260,"children":8261},{},[8262],{"type":38,"value":8263},"UNVERIFIED — treat 44 as the documented figure",{"type":29,"tag":136,"props":8265,"children":8266},{},[8267,8269],{"type":38,"value":8268},"Tailoring by model type: rule-based 27, predictive 36–40, generative 41–44. ",{"type":29,"tag":63,"props":8270,"children":8271},{},[8272],{"type":38,"value":67},{"type":29,"tag":136,"props":8274,"children":8275},{},[8276,8278,8283,8284,8289,8291,8296,8298],{"type":38,"value":8277},"Topics: access to the AI system (7), development of AI software (6), model robustness (5), AI supply chain (4), and 3 each for threat management, governance and oversight, legal and compliance, ",{"type":29,"tag":34,"props":8279,"children":8280},{},[8281],{"type":38,"value":8282},"logging and monitoring",{"type":38,"value":4721},{"type":29,"tag":34,"props":8285,"children":8286},{},[8287],{"type":38,"value":8288},"documenting and inventorying",{"type":38,"value":8290},", and ",{"type":29,"tag":34,"props":8292,"children":8293},{},[8294],{"type":38,"value":8295},"filtering and sanitizing",{"type":38,"value":8297},". Encryption and resilience have 2 each. ",{"type":29,"tag":63,"props":8299,"children":8300},{},[8301],{"type":38,"value":67},{"type":29,"tag":136,"props":8303,"children":8304},{},[8305,8316,8318],{"type":29,"tag":34,"props":8306,"children":8307},{},[8308,8310,8315],{"type":38,"value":8309},"Eligibility is AI application and platform ",{"type":29,"tag":101,"props":8311,"children":8312},{},[8313],{"type":38,"value":8314},"providers",{"type":38,"value":120},{"type":38,"value":8317}," AI users and customers cannot certify, and \"a SaaS user can't certify on behalf of its provider\". ",{"type":29,"tag":63,"props":8319,"children":8320},{},[8321],{"type":38,"value":8246},{"type":29,"tag":136,"props":8323,"children":8324},{},[8325,8327,8332,8334,8338,8339],{"type":38,"value":8326},"The help page says it is add-on only (with e1, i1 or r2). The current product page says \"added to e1, i1, or r2 … ",{"type":29,"tag":101,"props":8328,"children":8329},{},[8330],{"type":38,"value":8331},"or",{"type":38,"value":8333}," standalone\". ",{"type":29,"tag":63,"props":8335,"children":8336},{},[8337],{"type":38,"value":67},{"type":38,"value":354},{"type":29,"tag":34,"props":8340,"children":8341},{},[8342],{"type":38,"value":8343},"Conflict: confirm with HITRUST.",{"type":29,"tag":136,"props":8345,"children":8346},{},[8347,8349],{"type":38,"value":8348},"Validity follows the paired assessment: 1 yr (e1\u002Fi1) or 2 yr (r2). ",{"type":29,"tag":63,"props":8350,"children":8351},{},[8352],{"type":38,"value":67},{"type":29,"tag":136,"props":8354,"children":8355},{},[8356,8361,8363,8368,8369],{"type":29,"tag":34,"props":8357,"children":8358},{},[8359],{"type":38,"value":8360},"HITRUST AI Risk Management Assessment:",{"type":38,"value":8362}," 51 controls harmonised with ISO\u002FIEC 23894:2023 and the NIST AI RMF. It is a self-assessment or validated by an external assessor, but ",{"type":29,"tag":34,"props":8364,"children":8365},{},[8366],{"type":38,"value":8367},"not a certification",{"type":38,"value":1545},{"type":29,"tag":63,"props":8370,"children":8371},{},[8372],{"type":38,"value":8373},"S, on HITRUST pages",{"type":29,"tag":136,"props":8375,"children":8376},{},[8377,8379,8384,8386,8391,8392],{"type":38,"value":8378},"The help page says AI ",{"type":29,"tag":101,"props":8380,"children":8381},{},[8382],{"type":38,"value":8383},"usage",{"type":38,"value":8385}," requirements are slated for CSF v12, and ISO\u002FIEC 42001 is being considered for v12. ",{"type":29,"tag":34,"props":8387,"children":8388},{},[8389],{"type":38,"value":8390},"v12 has not been released as of this check.",{"type":38,"value":354},{"type":29,"tag":63,"props":8393,"children":8394},{},[8395],{"type":38,"value":8396},"V statement; status S",{"type":29,"tag":290,"props":8398,"children":8400},{"id":8399},"b-native-structure-6",[8401],{"type":38,"value":423},{"type":29,"tag":297,"props":8403,"children":8404},{},[8405,8417,8443,8452],{"type":29,"tag":136,"props":8406,"children":8407},{},[8408,8410,8415],{"type":38,"value":8409},"The CSF is organised into 14 control categories (00–13) and 19 assessment domains, built from ",{"type":29,"tag":34,"props":8411,"children":8412},{},[8413],{"type":38,"value":8414},"requirement statements",{"type":38,"value":8416}," at implementation levels.",{"type":29,"tag":136,"props":8418,"children":8419},{},[8420,8422,8427,8429,8434,8436,8441],{"type":38,"value":8421},"Assessments come in three tiers: ",{"type":29,"tag":34,"props":8423,"children":8424},{},[8425],{"type":38,"value":8426},"e1",{"type":38,"value":8428}," (essentials, 44 statements), ",{"type":29,"tag":34,"props":8430,"children":8431},{},[8432],{"type":38,"value":8433},"i1",{"type":38,"value":8435}," (implemented, 182), ",{"type":29,"tag":34,"props":8437,"children":8438},{},[8439],{"type":38,"value":8440},"r2",{"type":38,"value":8442}," (risk-based, tailored, often 300+).",{"type":29,"tag":136,"props":8444,"children":8445},{},[8446,8448],{"type":38,"value":8447},"They are scored on the PRISMA maturity model (policy, procedure, implemented, measured, managed). r2 scores all five, while e1 and i1 focus on implementation. ",{"type":29,"tag":63,"props":8449,"children":8450},{},[8451],{"type":38,"value":87},{"type":29,"tag":136,"props":8453,"children":8454},{},[8455],{"type":38,"value":8456},"\"Compliance factors\" add requirements for authoritative sources such as HIPAA, NIST, OWASP Agentic, and AI Security.",{"type":29,"tag":290,"props":8458,"children":8460},{"id":8459},"c-who-asks-and-why-8",[8461],{"type":38,"value":843},{"type":29,"tag":297,"props":8463,"children":8464},{},[8465,8479],{"type":29,"tag":136,"props":8466,"children":8467},{},[8468,8473,8475],{"type":29,"tag":34,"props":8469,"children":8470},{},[8471],{"type":38,"value":8472},"US healthcare payers, providers and health-tech buyers",{"type":38,"value":8474}," ask vendors that handle PHI. HIPAA does not require HITRUST, but it is a de facto procurement standard. ",{"type":29,"tag":63,"props":8476,"children":8477},{},[8478],{"type":38,"value":77},{"type":29,"tag":136,"props":8480,"children":8481},{},[8482],{"type":38,"value":8483},"The AI Security Certification is aimed at healthcare and other regulated buyers evaluating AI vendors.",{"type":29,"tag":290,"props":8485,"children":8487},{"id":8486},"d-how-evidence-works-8",[8488],{"type":38,"value":877},{"type":29,"tag":297,"props":8490,"children":8491},{},[8492,8497],{"type":29,"tag":136,"props":8493,"children":8494},{},[8495],{"type":38,"value":8496},"Readiness, then validated testing by an Authorized External Assessor (evidence per requirement statement, sampling, and PRISMA scoring for r2), then HITRUST QA, then certification.",{"type":29,"tag":136,"props":8498,"children":8499},{},[8500,8502,8507,8509,8513,8515],{"type":38,"value":8501},"A ",{"type":29,"tag":34,"props":8503,"children":8504},{},[8505],{"type":38,"value":8506},"Shared Responsibility and Inheritance Program",{"type":38,"value":8508}," lets organisations inherit controls from HITRUST-certified service providers. ",{"type":29,"tag":63,"props":8510,"children":8511},{},[8512],{"type":38,"value":87},{"type":38,"value":8514}," Qpoint could become an inheritable provider for the AI-monitoring requirements its customers carry. ",{"type":29,"tag":34,"props":8516,"children":8517},{},[8518],{"type":38,"value":8519},"This is a product opportunity worth checking.",{"type":29,"tag":290,"props":8521,"children":8523},{"id":8522},"e-what-qpoint-can-evidence-5",[8524],{"type":38,"value":896},{"type":29,"tag":297,"props":8526,"children":8527},{},[8528,8613,8623,8633],{"type":29,"tag":136,"props":8529,"children":8530},{},[8531,8536,8538,8542,8544],{"type":29,"tag":34,"props":8532,"children":8533},{},[8534],{"type":38,"value":8535},"AI Security Certification topics",{"type":38,"value":8537}," (for customers who are AI ",{"type":29,"tag":101,"props":8539,"children":8540},{},[8541],{"type":38,"value":8314},{"type":38,"value":8543},"):\n",{"type":29,"tag":297,"props":8545,"children":8546},{},[8547,8556,8565,8574,8584,8594,8604],{"type":29,"tag":136,"props":8548,"children":8549},{},[8550,8554],{"type":29,"tag":34,"props":8551,"children":8552},{},[8553],{"type":38,"value":8282},{"type":38,"value":8555}," — strong;",{"type":29,"tag":136,"props":8557,"children":8558},{},[8559,8563],{"type":29,"tag":34,"props":8560,"children":8561},{},[8562],{"type":38,"value":8288},{"type":38,"value":8564}," — strong for the in-use inventory;",{"type":29,"tag":136,"props":8566,"children":8567},{},[8568,8572],{"type":29,"tag":34,"props":8569,"children":8570},{},[8571],{"type":38,"value":8295},{"type":38,"value":8573}," — partial→strong through redaction of inputs;",{"type":29,"tag":136,"props":8575,"children":8576},{},[8577,8582],{"type":29,"tag":34,"props":8578,"children":8579},{},[8580],{"type":38,"value":8581},"access to the AI system",{"type":38,"value":8583}," — partial (per-user allow-lists);",{"type":29,"tag":136,"props":8585,"children":8586},{},[8587,8592],{"type":29,"tag":34,"props":8588,"children":8589},{},[8590],{"type":38,"value":8591},"AI supply chain",{"type":38,"value":8593}," — partial→strong (model and provider inventory);",{"type":29,"tag":136,"props":8595,"children":8596},{},[8597,8602],{"type":29,"tag":34,"props":8598,"children":8599},{},[8600],{"type":38,"value":8601},"threat management",{"type":38,"value":8603}," — partial.",{"type":29,"tag":136,"props":8605,"children":8606},{},[8607,8611],{"type":29,"tag":34,"props":8608,"children":8609},{},[8610],{"type":38,"value":8019},{"type":38,"value":8612}," model robustness, development of AI software, legal and compliance.",{"type":29,"tag":136,"props":8614,"children":8615},{},[8616,8621],{"type":29,"tag":34,"props":8617,"children":8618},{},[8619],{"type":38,"value":8620},"The new Agentic factor and the OWASP-agentic mapping",{"type":38,"value":8622}," carry the ASI ratings from §1. Strongest are ASI02, ASI04 and ASI10.",{"type":29,"tag":136,"props":8624,"children":8625},{},[8626,8631],{"type":29,"tag":34,"props":8627,"children":8628},{},[8629],{"type":38,"value":8630},"Core CSF:",{"type":38,"value":8632}," endpoint protection, network monitoring and DLP-type statements cover employee AI use, with partial evidence for AI traffic.",{"type":29,"tag":136,"props":8634,"children":8635},{},[8636,8641,8643,8648],{"type":29,"tag":34,"props":8637,"children":8638},{},[8639],{"type":38,"value":8640},"Eligibility gap:",{"type":38,"value":8642}," most Qpoint customers are AI ",{"type":29,"tag":101,"props":8644,"children":8645},{},[8646],{"type":38,"value":8647},"users",{"type":38,"value":8649},", and HITRUST's AI certification excludes users. Until CSF v12 brings AI usage requirements, Qpoint evidence lands in base CSF statements (and AI RM assessment controls), not the AI cert.",{"type":29,"tag":290,"props":8651,"children":8653},{"id":8652},"f-crosswalks-6",[8654],{"type":38,"value":1268},{"type":29,"tag":297,"props":8656,"children":8657},{},[8658,8674],{"type":29,"tag":136,"props":8659,"children":8660},{},[8661,8663,8668,8670],{"type":38,"value":8662},"The CSF is itself a harmonisation, mapping many authoritative sources: NIST 800-53 r5.2.0, NIST CSF, HIPAA, ISO 27001\u002F27002, PCI, SOC 2, ",{"type":29,"tag":34,"props":8664,"children":8665},{},[8666],{"type":38,"value":8667},"OWASP Agentic Top 10 (v11.9)",{"type":38,"value":8669},", AI sources (NIST AI RMF, ISO 23894, ISO 42001 per partner materials), and others. ",{"type":29,"tag":63,"props":8671,"children":8672},{},[8673],{"type":38,"value":3700},{"type":29,"tag":136,"props":8675,"children":8676},{},[8677,8679],{"type":38,"value":8678},"HITRUST publishes a comparison of 42001 and HITRUST AI (blog). ",{"type":29,"tag":63,"props":8680,"children":8681},{},[8682],{"type":38,"value":77},{"type":29,"tag":30,"props":8684,"children":8685},{},[8686,8690,8691,8697,8698,8704,8705,8711,8712,8718,8719,8725,8726,8732,8733,8739,8740],{"type":29,"tag":34,"props":8687,"children":8688},{},[8689],{"type":38,"value":1351},{"type":38,"value":354},{"type":29,"tag":1354,"props":8692,"children":8695},{"href":8693,"rel":8694},"https:\u002F\u002Fhitrustalliance.net\u002Fadvisories\u002Fhaa-2026-005-csf-version-11.9.0-release",[1358],[8696],{"type":38,"value":8693},{"type":38,"value":1362},{"type":29,"tag":1354,"props":8699,"children":8702},{"href":8700,"rel":8701},"https:\u002F\u002Fhitrustalliance.net\u002Fadvisories\u002Fhaa-2026-006-csf-v11.8-creation-deadline-for-e1-and-i1-assessments",[1358],[8703],{"type":38,"value":8700},{"type":38,"value":1362},{"type":29,"tag":1354,"props":8706,"children":8709},{"href":8707,"rel":8708},"https:\u002F\u002Fhitrustalliance.net\u002Fassessments-and-certifications\u002Faisecurityassessment",[1358],[8710],{"type":38,"value":8707},{"type":38,"value":1362},{"type":29,"tag":1354,"props":8713,"children":8716},{"href":8714,"rel":8715},"https:\u002F\u002Fhitrustalliance.net\u002Fhelp\u002Fai-sec-assessment",[1358],[8717],{"type":38,"value":8714},{"type":38,"value":1362},{"type":29,"tag":1354,"props":8720,"children":8723},{"href":8721,"rel":8722},"https:\u002F\u002Fhitrustalliance.net\u002Fblog\u002Fhitrust-ai-risk-management-and-ai-security-certification-whats-the-difference",[1358],[8724],{"type":38,"value":8721},{"type":38,"value":1362},{"type":29,"tag":1354,"props":8727,"children":8730},{"href":8728,"rel":8729},"https:\u002F\u002Fhitrustalliance.net\u002Fblog\u002Fiso-iec-42001-vs-hitrust-ai-whats-the-difference",[1358],[8731],{"type":38,"value":8728},{"type":38,"value":1362},{"type":29,"tag":1354,"props":8734,"children":8737},{"href":8735,"rel":8736},"https:\u002F\u002Fwww.accorian.com\u002Fhitrust-csf-v11-9-0-what-changed-and-what-organizations-need-to-do\u002F",[1358],[8738],{"type":38,"value":8735},{"type":38,"value":1362},{"type":29,"tag":1354,"props":8741,"children":8744},{"href":8742,"rel":8743},"https:\u002F\u002Fwww.a-lign.com\u002Farticles\u002Fthe-hitrust-ai-security-assessment-explained",[1358],[8745],{"type":38,"value":8742},{"type":29,"tag":280,"props":8747,"children":8748},{},[],{"type":29,"tag":284,"props":8750,"children":8752},{"id":8751},"_10-isoiec-270012022-isms",[8753],{"type":38,"value":22},{"type":29,"tag":290,"props":8755,"children":8757},{"id":8756},"a-identity-and-status-9",[8758],{"type":38,"value":295},{"type":29,"tag":297,"props":8760,"children":8761},{},[8762,8779,8792,8808,8827],{"type":29,"tag":136,"props":8763,"children":8764},{},[8765,8770,8772,8777],{"type":29,"tag":34,"props":8766,"children":8767},{},[8768],{"type":38,"value":8769},"ISO\u002FIEC 27001:2022",{"type":38,"value":8771}," (Oct 2022), plus ",{"type":29,"tag":34,"props":8773,"children":8774},{},[8775],{"type":38,"value":8776},"Amd 1:2024",{"type":38,"value":8778}," (climate action changes to clauses 4.1\u002F4.2). It is final.",{"type":29,"tag":136,"props":8780,"children":8781},{},[8782,8786,8787,8791],{"type":29,"tag":34,"props":8783,"children":8784},{},[8785],{"type":38,"value":380},{"type":38,"value":382},{"type":29,"tag":34,"props":8788,"children":8789},{},[8790],{"type":38,"value":5532},{"type":38,"value":120},{"type":29,"tag":136,"props":8793,"children":8794},{},[8795,8796,8801,8803],{"type":38,"value":646},{"type":29,"tag":34,"props":8797,"children":8798},{},[8799],{"type":38,"value":8800},"transition from 27001:2013 closed on 31 Oct 2025",{"type":38,"value":8802}," (IAF MD 26:2023, 36 months). Certificates against 2013 are no longer valid. ",{"type":29,"tag":63,"props":8804,"children":8805},{},[8806],{"type":38,"value":8807},"S, multiple",{"type":29,"tag":136,"props":8809,"children":8810},{},[8811,8816,8817,8821,8823],{"type":29,"tag":34,"props":8812,"children":8813},{},[8814],{"type":38,"value":8815},"No 27001:2026 edition and no AI amendment exists.",{"type":38,"value":354},{"type":29,"tag":63,"props":8818,"children":8819},{},[8820],{"type":38,"value":77},{"type":38,"value":8822}," Auditors are reading existing controls such as 5.23, 8.10, 8.16 and 8.28 to cover AI use. ",{"type":29,"tag":63,"props":8824,"children":8825},{},[8826],{"type":38,"value":77},{"type":29,"tag":136,"props":8828,"children":8829},{},[8830,8832],{"type":38,"value":8831},"Global accreditation functions moved from IAF and ILAC to a successor body (\"Global Accreditation Cooperation\") on 1 Jan 2026, according to a single source. ",{"type":29,"tag":34,"props":8833,"children":8834},{},[8835],{"type":29,"tag":63,"props":8836,"children":8837},{},[8838],{"type":38,"value":97},{"type":29,"tag":290,"props":8840,"children":8842},{"id":8841},"b-native-structure-7",[8843],{"type":38,"value":423},{"type":29,"tag":297,"props":8845,"children":8846},{},[8847,8852,8895,8900],{"type":29,"tag":136,"props":8848,"children":8849},{},[8850],{"type":38,"value":8851},"Clauses 4–10 (Harmonized Structure, the same skeleton as 42001).",{"type":29,"tag":136,"props":8853,"children":8854},{},[8855,8860],{"type":29,"tag":34,"props":8856,"children":8857},{},[8858],{"type":38,"value":8859},"Annex A has 93 controls in 4 themes:",{"type":29,"tag":297,"props":8861,"children":8862},{},[8863,8871,8879,8887],{"type":29,"tag":136,"props":8864,"children":8865},{},[8866],{"type":29,"tag":34,"props":8867,"children":8868},{},[8869],{"type":38,"value":8870},"Organizational (5.1–5.37, 37 controls)",{"type":29,"tag":136,"props":8872,"children":8873},{},[8874],{"type":29,"tag":34,"props":8875,"children":8876},{},[8877],{"type":38,"value":8878},"People (6.1–6.8, 8)",{"type":29,"tag":136,"props":8880,"children":8881},{},[8882],{"type":29,"tag":34,"props":8883,"children":8884},{},[8885],{"type":38,"value":8886},"Physical (7.1–7.14, 14)",{"type":29,"tag":136,"props":8888,"children":8889},{},[8890],{"type":29,"tag":34,"props":8891,"children":8892},{},[8893],{"type":38,"value":8894},"Technological (8.1–8.34, 34)",{"type":29,"tag":136,"props":8896,"children":8897},{},[8898],{"type":38,"value":8899},"Controls carry attributes: control type, security properties, cybersecurity concepts (Identify, Protect, Detect, Respond, Recover), operational capabilities and security domains.",{"type":29,"tag":136,"props":8901,"children":8902},{},[8903],{"type":38,"value":8904},"The Statement of Applicability selects controls. 27002:2022 gives guidance.",{"type":29,"tag":290,"props":8906,"children":8908},{"id":8907},"c-who-asks-and-why-9",[8909],{"type":38,"value":843},{"type":29,"tag":297,"props":8911,"children":8912},{},[8913,8918,8923],{"type":29,"tag":136,"props":8914,"children":8915},{},[8916],{"type":38,"value":8917},"Global, especially EU and APAC, buyers ask vendors for it as the baseline security certification.",{"type":29,"tag":136,"props":8919,"children":8920},{},[8921],{"type":38,"value":8922},"Regulators reference it (e.g., NIS2 implementing acts, DORA practices).",{"type":29,"tag":136,"props":8924,"children":8925},{},[8926],{"type":38,"value":8927},"It is a prerequisite for STAR for AI routes a3 and a4, and pairs with 42001 in an integrated management system.",{"type":29,"tag":290,"props":8929,"children":8931},{"id":8930},"d-how-evidence-works-9",[8932],{"type":38,"value":877},{"type":29,"tag":297,"props":8934,"children":8935},{},[8936,8941],{"type":29,"tag":136,"props":8937,"children":8938},{},[8939],{"type":38,"value":8940},"Accredited certification-body audit: Stage 1 and Stage 2, then a 3-year certificate with surveillance audits.",{"type":29,"tag":136,"props":8942,"children":8943},{},[8944],{"type":38,"value":8945},"Auditors need records showing that SoA controls operate.",{"type":29,"tag":290,"props":8947,"children":8949},{"id":8948},"e-what-qpoint-can-evidence-6",[8950],{"type":38,"value":896},{"type":29,"tag":440,"props":8952,"children":8953},{},[8954,8972],{"type":29,"tag":444,"props":8955,"children":8956},{},[8957],{"type":29,"tag":448,"props":8958,"children":8959},{},[8960,8964,8968],{"type":29,"tag":452,"props":8961,"children":8962},{},[8963],{"type":38,"value":5141},{"type":29,"tag":452,"props":8965,"children":8966},{},[8967],{"type":38,"value":915},{"type":29,"tag":452,"props":8969,"children":8970},{},[8971],{"type":38,"value":920},{"type":29,"tag":468,"props":8973,"children":8974},{},[8975,9000,9025,9050,9072,9104,9133,9158,9183,9215,9240,9262,9284,9306,9328,9350,9372],{"type":29,"tag":448,"props":8976,"children":8977},{},[8978,8988,8995],{"type":29,"tag":475,"props":8979,"children":8980},{},[8981,8986],{"type":29,"tag":34,"props":8982,"children":8983},{},[8984],{"type":38,"value":8985},"5.9",{"type":38,"value":8987}," inventory of information and other associated assets",{"type":29,"tag":475,"props":8989,"children":8990},{},[8991],{"type":29,"tag":34,"props":8992,"children":8993},{},[8994],{"type":38,"value":939},{"type":29,"tag":475,"props":8996,"children":8997},{},[8998],{"type":38,"value":8999},"AI services, agents and MCP servers as assets.",{"type":29,"tag":448,"props":9001,"children":9002},{},[9003,9013,9020],{"type":29,"tag":475,"props":9004,"children":9005},{},[9006,9011],{"type":29,"tag":34,"props":9007,"children":9008},{},[9009],{"type":38,"value":9010},"5.10",{"type":38,"value":9012}," acceptable use of information and assets",{"type":29,"tag":475,"props":9014,"children":9015},{},[9016],{"type":29,"tag":34,"props":9017,"children":9018},{},[9019],{"type":38,"value":4333},{"type":29,"tag":475,"props":9021,"children":9022},{},[9023],{"type":38,"value":9024},"AI AUP enforcement.",{"type":29,"tag":448,"props":9026,"children":9027},{},[9028,9038,9045],{"type":29,"tag":475,"props":9029,"children":9030},{},[9031,9036],{"type":29,"tag":34,"props":9032,"children":9033},{},[9034],{"type":38,"value":9035},"5.14",{"type":38,"value":9037}," information transfer",{"type":29,"tag":475,"props":9039,"children":9040},{},[9041],{"type":29,"tag":34,"props":9042,"children":9043},{},[9044],{"type":38,"value":939},{"type":29,"tag":475,"props":9046,"children":9047},{},[9048],{"type":38,"value":9049},"Rules for data transferred to AI providers, enforced.",{"type":29,"tag":448,"props":9051,"children":9052},{},[9053,9063,9067],{"type":29,"tag":475,"props":9054,"children":9055},{},[9056,9061],{"type":29,"tag":34,"props":9057,"children":9058},{},[9059],{"type":38,"value":9060},"5.19 \u002F 5.21 \u002F 5.22",{"type":38,"value":9062}," supplier relationships, ICT supply chain, monitoring supplier services",{"type":29,"tag":475,"props":9064,"children":9065},{},[9066],{"type":38,"value":960},{"type":29,"tag":475,"props":9068,"children":9069},{},[9070],{"type":38,"value":9071},"AI vendor usage against the approved list.",{"type":29,"tag":448,"props":9073,"children":9074},{},[9075,9085,9092],{"type":29,"tag":475,"props":9076,"children":9077},{},[9078,9083],{"type":29,"tag":34,"props":9079,"children":9080},{},[9081],{"type":38,"value":9082},"5.23",{"type":38,"value":9084}," information security for use of cloud services",{"type":29,"tag":475,"props":9086,"children":9087},{},[9088],{"type":29,"tag":34,"props":9089,"children":9090},{},[9091],{"type":38,"value":939},{"type":29,"tag":475,"props":9093,"children":9094},{},[9095,9097,9102],{"type":38,"value":9096},"AI SaaS and LLM APIs ",{"type":29,"tag":101,"props":9098,"children":9099},{},[9100],{"type":38,"value":9101},"are",{"type":38,"value":9103}," cloud services.",{"type":29,"tag":448,"props":9105,"children":9106},{},[9107,9124,9128],{"type":29,"tag":475,"props":9108,"children":9109},{},[9110,9115,9117,9122],{"type":29,"tag":34,"props":9111,"children":9112},{},[9113],{"type":38,"value":9114},"5.12",{"type":38,"value":9116}," classification \u002F ",{"type":29,"tag":34,"props":9118,"children":9119},{},[9120],{"type":38,"value":9121},"5.34",{"type":38,"value":9123}," privacy and protection of PII",{"type":29,"tag":475,"props":9125,"children":9126},{},[9127],{"type":38,"value":1001},{"type":29,"tag":475,"props":9129,"children":9130},{},[9131],{"type":38,"value":9132},"Data-class detection on AI flows.",{"type":29,"tag":448,"props":9134,"children":9135},{},[9136,9146,9153],{"type":29,"tag":475,"props":9137,"children":9138},{},[9139,9144],{"type":29,"tag":34,"props":9140,"children":9141},{},[9142],{"type":38,"value":9143},"8.11",{"type":38,"value":9145}," data masking",{"type":29,"tag":475,"props":9147,"children":9148},{},[9149],{"type":29,"tag":34,"props":9150,"children":9151},{},[9152],{"type":38,"value":939},{"type":29,"tag":475,"props":9154,"children":9155},{},[9156],{"type":38,"value":9157},"Inline redaction.",{"type":29,"tag":448,"props":9159,"children":9160},{},[9161,9171,9178],{"type":29,"tag":475,"props":9162,"children":9163},{},[9164,9169],{"type":29,"tag":34,"props":9165,"children":9166},{},[9167],{"type":38,"value":9168},"8.12",{"type":38,"value":9170}," data leakage prevention",{"type":29,"tag":475,"props":9172,"children":9173},{},[9174],{"type":29,"tag":34,"props":9175,"children":9176},{},[9177],{"type":38,"value":939},{"type":29,"tag":475,"props":9179,"children":9180},{},[9181],{"type":38,"value":9182},"Redaction and blocking to AI endpoints.",{"type":29,"tag":448,"props":9184,"children":9185},{},[9186,9203,9210],{"type":29,"tag":475,"props":9187,"children":9188},{},[9189,9194,9196,9201],{"type":29,"tag":34,"props":9190,"children":9191},{},[9192],{"type":38,"value":9193},"8.15",{"type":38,"value":9195}," logging \u002F ",{"type":29,"tag":34,"props":9197,"children":9198},{},[9199],{"type":38,"value":9200},"8.16",{"type":38,"value":9202}," monitoring activities",{"type":29,"tag":475,"props":9204,"children":9205},{},[9206],{"type":29,"tag":34,"props":9207,"children":9208},{},[9209],{"type":38,"value":939},{"type":29,"tag":475,"props":9211,"children":9212},{},[9213],{"type":38,"value":9214},"AI activity logs and anomaly detection.",{"type":29,"tag":448,"props":9216,"children":9217},{},[9218,9228,9235],{"type":29,"tag":475,"props":9219,"children":9220},{},[9221,9226],{"type":29,"tag":34,"props":9222,"children":9223},{},[9224],{"type":38,"value":9225},"8.23",{"type":38,"value":9227}," web filtering",{"type":29,"tag":475,"props":9229,"children":9230},{},[9231],{"type":29,"tag":34,"props":9232,"children":9233},{},[9234],{"type":38,"value":939},{"type":29,"tag":475,"props":9236,"children":9237},{},[9238],{"type":38,"value":9239},"Provider allow-listing and blocking.",{"type":29,"tag":448,"props":9241,"children":9242},{},[9243,9253,9257],{"type":29,"tag":475,"props":9244,"children":9245},{},[9246,9251],{"type":29,"tag":34,"props":9247,"children":9248},{},[9249],{"type":38,"value":9250},"8.1",{"type":38,"value":9252}," user endpoint devices",{"type":29,"tag":475,"props":9254,"children":9255},{},[9256],{"type":38,"value":960},{"type":29,"tag":475,"props":9258,"children":9259},{},[9260],{"type":38,"value":9261},"AI tools on endpoints.",{"type":29,"tag":448,"props":9263,"children":9264},{},[9265,9275,9279],{"type":29,"tag":475,"props":9266,"children":9267},{},[9268,9273],{"type":29,"tag":34,"props":9269,"children":9270},{},[9271],{"type":38,"value":9272},"8.19",{"type":38,"value":9274}," installation of software on operational systems",{"type":29,"tag":475,"props":9276,"children":9277},{},[9278],{"type":38,"value":1001},{"type":29,"tag":475,"props":9280,"children":9281},{},[9282],{"type":38,"value":9283},"Detects unapproved harnesses, agents and MCP servers.",{"type":29,"tag":448,"props":9285,"children":9286},{},[9287,9297,9301],{"type":29,"tag":475,"props":9288,"children":9289},{},[9290,9295],{"type":29,"tag":34,"props":9291,"children":9292},{},[9293],{"type":38,"value":9294},"8.20 \u002F 8.21",{"type":38,"value":9296}," networks security, security of network services",{"type":29,"tag":475,"props":9298,"children":9299},{},[9300],{"type":38,"value":1001},{"type":29,"tag":475,"props":9302,"children":9303},{},[9304],{"type":38,"value":9305},"Network-level AI controls.",{"type":29,"tag":448,"props":9307,"children":9308},{},[9309,9319,9323],{"type":29,"tag":475,"props":9310,"children":9311},{},[9312,9317],{"type":29,"tag":34,"props":9313,"children":9314},{},[9315],{"type":38,"value":9316},"8.9",{"type":38,"value":9318}," configuration management",{"type":29,"tag":475,"props":9320,"children":9321},{},[9322],{"type":38,"value":1001},{"type":29,"tag":475,"props":9324,"children":9325},{},[9326],{"type":38,"value":9327},"Agent and MCP configurations observed.",{"type":29,"tag":448,"props":9329,"children":9330},{},[9331,9341,9345],{"type":29,"tag":475,"props":9332,"children":9333},{},[9334,9339],{"type":29,"tag":34,"props":9335,"children":9336},{},[9337],{"type":38,"value":9338},"8.28",{"type":38,"value":9340}," secure coding",{"type":29,"tag":475,"props":9342,"children":9343},{},[9344],{"type":38,"value":1001},{"type":29,"tag":475,"props":9346,"children":9347},{},[9348],{"type":38,"value":9349},"Visibility of coding-agent use in development.",{"type":29,"tag":448,"props":9351,"children":9352},{},[9353,9363,9367],{"type":29,"tag":475,"props":9354,"children":9355},{},[9356,9361],{"type":29,"tag":34,"props":9357,"children":9358},{},[9359],{"type":38,"value":9360},"5.24–5.28",{"type":38,"value":9362}," incident management",{"type":29,"tag":475,"props":9364,"children":9365},{},[9366],{"type":38,"value":1001},{"type":29,"tag":475,"props":9368,"children":9369},{},[9370],{"type":38,"value":9371},"Detection inputs.",{"type":29,"tag":448,"props":9373,"children":9374},{},[9375,9391,9398],{"type":29,"tag":475,"props":9376,"children":9377},{},[9378,9383,9384,9389],{"type":29,"tag":34,"props":9379,"children":9380},{},[9381],{"type":38,"value":9382},"People and Physical themes (6.x, 7.x)",{"type":38,"value":4721},{"type":29,"tag":34,"props":9385,"children":9386},{},[9387],{"type":38,"value":9388},"5.1–5.4",{"type":38,"value":9390}," governance",{"type":29,"tag":475,"props":9392,"children":9393},{},[9394],{"type":29,"tag":34,"props":9395,"children":9396},{},[9397],{"type":38,"value":1247},{"type":29,"tag":475,"props":9399,"children":9400},{},[9401],{"type":38,"value":9402},"Partial only for 6.3 awareness: usage data targets training.",{"type":29,"tag":290,"props":9404,"children":9406},{"id":9405},"f-crosswalks-7",[9407],{"type":38,"value":1268},{"type":29,"tag":297,"props":9409,"children":9410},{},[9411,9425,9434],{"type":29,"tag":136,"props":9412,"children":9413},{},[9414,9419,9421],{"type":29,"tag":34,"props":9415,"children":9416},{},[9417],{"type":38,"value":9418},"ISO\u002FIEC 27002:2022 Annex B",{"type":38,"value":9420}," maps 2022↔2013 controls (official). ",{"type":29,"tag":63,"props":9422,"children":9423},{},[9424],{"type":38,"value":87},{"type":29,"tag":136,"props":9426,"children":9427},{},[9428,9430],{"type":38,"value":9429},"AICPA TSC↔27001 mapping (version caveat above). CCM v4.1 and AICM map to 27001. NIST CSF 2.0 informative references (OLIR) include 27001:2022. ",{"type":29,"tag":63,"props":9431,"children":9432},{},[9433],{"type":38,"value":2758},{"type":29,"tag":136,"props":9435,"children":9436},{},[9437,9439],{"type":38,"value":9438},"27001 and 42001 share the Harmonized Structure, which allows an integrated audit. ",{"type":29,"tag":63,"props":9440,"children":9441},{},[9442],{"type":38,"value":87},{"type":29,"tag":30,"props":9444,"children":9445},{},[9446,9450,9451,9457,9458,9464,9465,9471,9472],{"type":29,"tag":34,"props":9447,"children":9448},{},[9449],{"type":38,"value":1351},{"type":38,"value":354},{"type":29,"tag":1354,"props":9452,"children":9455},{"href":9453,"rel":9454},"https:\u002F\u002Fwww.brightdefense.com\u002Fnews\u002Fiso-270012022-deadline-puts-legacy-certificates-at-risk\u002F",[1358],[9456],{"type":38,"value":9453},{"type":38,"value":1362},{"type":29,"tag":1354,"props":9459,"children":9462},{"href":9460,"rel":9461},"https:\u002F\u002Fwww.nsai.ie\u002Fcertification\u002Fmanagement-systems\u002Fiso-iec-27001-information-security-management-system\u002Fiso-iec-270012022-transition-policy\u002F",[1358],[9463],{"type":38,"value":9460},{"type":38,"value":1362},{"type":29,"tag":1354,"props":9466,"children":9469},{"href":9467,"rel":9468},"https:\u002F\u002Fwww.brightdefense.com\u002Fnews\u002Fiso-27001-what-changed-in-2026\u002F",[1358],[9470],{"type":38,"value":9467},{"type":38,"value":1362},{"type":29,"tag":1354,"props":9473,"children":9476},{"href":9474,"rel":9475},"https:\u002F\u002Fwww.quality.org\u002Fguide\u002Fisoiec-270012022-details-new-controls-and-impact-revisions",[1358],[9477],{"type":38,"value":9474},{"type":29,"tag":280,"props":9479,"children":9480},{},[],{"type":29,"tag":284,"props":9482,"children":9484},{"id":9483},"_11-cross-cutting-synthesis-for-qpoints-design",[9485],{"type":38,"value":23},{"type":29,"tag":290,"props":9487,"children":9489},{"id":9488},"_111-framework-shape-at-a-glance",[9490],{"type":38,"value":9491},"11.1 Framework shape at a glance",{"type":29,"tag":440,"props":9493,"children":9494},{},[9495,9531],{"type":29,"tag":444,"props":9496,"children":9497},{},[9498],{"type":29,"tag":448,"props":9499,"children":9500},{},[9501,9506,9511,9516,9521,9526],{"type":29,"tag":452,"props":9502,"children":9503},{},[9504],{"type":38,"value":9505},"Framework",{"type":29,"tag":452,"props":9507,"children":9508},{},[9509],{"type":38,"value":9510},"Kind",{"type":29,"tag":452,"props":9512,"children":9513},{},[9514],{"type":38,"value":9515},"Unit",{"type":29,"tag":452,"props":9517,"children":9518},{},[9519],{"type":38,"value":9520},"Evidence mode",{"type":29,"tag":452,"props":9522,"children":9523},{},[9524],{"type":38,"value":9525},"Who demands it",{"type":29,"tag":452,"props":9527,"children":9528},{},[9529],{"type":38,"value":9530},"Qpoint fit",{"type":29,"tag":468,"props":9532,"children":9533},{},[9534,9567,9600,9632,9665,9698,9731,9764,9801,9838],{"type":29,"tag":448,"props":9535,"children":9536},{},[9537,9542,9547,9552,9557,9562],{"type":29,"tag":475,"props":9538,"children":9539},{},[9540],{"type":38,"value":9541},"OWASP LLM 2026 \u002F Agentic 2026",{"type":29,"tag":475,"props":9543,"children":9544},{},[9545],{"type":38,"value":9546},"Risk taxonomy",{"type":29,"tag":475,"props":9548,"children":9549},{},[9550],{"type":38,"value":9551},"LLM01–10 \u002F ASI01–10",{"type":29,"tag":475,"props":9553,"children":9554},{},[9555],{"type":38,"value":9556},"None (mapping plus tests)",{"type":29,"tag":475,"props":9558,"children":9559},{},[9560],{"type":38,"value":9561},"AppSec, buyers",{"type":29,"tag":475,"props":9563,"children":9564},{},[9565],{"type":38,"value":9566},"High for LLM02\u002F03\u002F04\u002F06, ASI02\u002F03\u002F04\u002F10",{"type":29,"tag":448,"props":9568,"children":9569},{},[9570,9575,9580,9585,9590,9595],{"type":29,"tag":475,"props":9571,"children":9572},{},[9573],{"type":38,"value":9574},"NIST AI RMF + 600-1",{"type":29,"tag":475,"props":9576,"children":9577},{},[9578],{"type":38,"value":9579},"Risk-management framework",{"type":29,"tag":475,"props":9581,"children":9582},{},[9583],{"type":38,"value":9584},"72 subcategories; 12 GenAI risks",{"type":29,"tag":475,"props":9586,"children":9587},{},[9588],{"type":38,"value":9589},"Self-assessment",{"type":29,"tag":475,"props":9591,"children":9592},{},[9593],{"type":38,"value":9594},"US gov, state safe harbours, GRC",{"type":29,"tag":475,"props":9596,"children":9597},{},[9598],{"type":38,"value":9599},"High for GV1.6, MS3.1, MG2.4, MG3.1–3.2",{"type":29,"tag":448,"props":9601,"children":9602},{},[9603,9607,9612,9617,9622,9627],{"type":29,"tag":475,"props":9604,"children":9605},{},[9606],{"type":38,"value":4471},{"type":29,"tag":475,"props":9608,"children":9609},{},[9610],{"type":38,"value":9611},"Attestation criteria",{"type":29,"tag":475,"props":9613,"children":9614},{},[9615],{"type":38,"value":9616},"33 CC plus A\u002FC\u002FPI\u002FP criteria; points of focus",{"type":29,"tag":475,"props":9618,"children":9619},{},[9620],{"type":38,"value":9621},"CPA attestation (Type 1\u002F2)",{"type":29,"tag":475,"props":9623,"children":9624},{},[9625],{"type":38,"value":9626},"Buyers' vendor risk",{"type":29,"tag":475,"props":9628,"children":9629},{},[9630],{"type":38,"value":9631},"High for CC6.7, CC6.8, CC7.2, CC9.2, C1.1",{"type":29,"tag":448,"props":9633,"children":9634},{},[9635,9640,9645,9650,9655,9660],{"type":29,"tag":475,"props":9636,"children":9637},{},[9638],{"type":38,"value":9639},"AIUC-1",{"type":29,"tag":475,"props":9641,"children":9642},{},[9643],{"type":38,"value":9644},"Certification (agents)",{"type":29,"tag":475,"props":9646,"children":9647},{},[9648],{"type":38,"value":9649},"~50 requirements, A001–F002",{"type":29,"tag":475,"props":9651,"children":9652},{},[9653],{"type":38,"value":9654},"Accredited audit plus AIUC evals, quarterly re-test",{"type":29,"tag":475,"props":9656,"children":9657},{},[9658],{"type":38,"value":9659},"Agent buyers, insurers",{"type":29,"tag":475,"props":9661,"children":9662},{},[9663],{"type":38,"value":9664},"Medium: A006, A008, B006, D003, E010, E011, E015",{"type":29,"tag":448,"props":9666,"children":9667},{},[9668,9673,9678,9683,9688,9693],{"type":29,"tag":475,"props":9669,"children":9670},{},[9671],{"type":38,"value":9672},"CSA AICM \u002F STAR for AI",{"type":29,"tag":475,"props":9674,"children":9675},{},[9676],{"type":38,"value":9677},"Controls matrix plus assurance programme",{"type":29,"tag":475,"props":9679,"children":9680},{},[9681],{"type":38,"value":9682},"247 controls, 18 domains, 5 roles",{"type":29,"tag":475,"props":9684,"children":9685},{},[9686],{"type":38,"value":9687},"Self (L1) or third-party (L2)",{"type":29,"tag":475,"props":9689,"children":9690},{},[9691],{"type":38,"value":9692},"Cloud and AI buyers",{"type":29,"tag":475,"props":9694,"children":9695},{},[9696],{"type":38,"value":9697},"High for UEM, DSP, LOG, STA (AI Customer role)",{"type":29,"tag":448,"props":9699,"children":9700},{},[9701,9706,9711,9716,9721,9726],{"type":29,"tag":475,"props":9702,"children":9703},{},[9704],{"type":38,"value":9705},"ISO\u002FIEC 42001",{"type":29,"tag":475,"props":9707,"children":9708},{},[9709],{"type":38,"value":9710},"Certifiable management system",{"type":29,"tag":475,"props":9712,"children":9713},{},[9714],{"type":38,"value":9715},"Clauses 4–10 plus 38 Annex A controls",{"type":29,"tag":475,"props":9717,"children":9718},{},[9719],{"type":38,"value":9720},"Accredited certification",{"type":29,"tag":475,"props":9722,"children":9723},{},[9724],{"type":38,"value":9725},"EU\u002Fglobal buyers, STAR L2",{"type":29,"tag":475,"props":9727,"children":9728},{},[9729],{"type":38,"value":9730},"High for A.4, A.9, A.10.3, 9.1",{"type":29,"tag":448,"props":9732,"children":9733},{},[9734,9739,9744,9749,9754,9759],{"type":29,"tag":475,"props":9735,"children":9736},{},[9737],{"type":38,"value":9738},"EU AI Act",{"type":29,"tag":475,"props":9740,"children":9741},{},[9742],{"type":38,"value":9743},"Law",{"type":29,"tag":475,"props":9745,"children":9746},{},[9747],{"type":38,"value":9748},"Articles, roles, tiers",{"type":29,"tag":475,"props":9750,"children":9751},{},[9752],{"type":38,"value":9753},"Conformity assessment (providers) or documentation (deployers)",{"type":29,"tag":475,"props":9755,"children":9756},{},[9757],{"type":38,"value":9758},"Regulators",{"type":29,"tag":475,"props":9760,"children":9761},{},[9762],{"type":38,"value":9763},"Inventory and classification baseline; Art. 26(5)\u002F(6) logs; Art. 4 targeting",{"type":29,"tag":448,"props":9765,"children":9766},{},[9767,9772,9776,9781,9786,9791],{"type":29,"tag":475,"props":9768,"children":9769},{},[9770],{"type":38,"value":9771},"EU CRA",{"type":29,"tag":475,"props":9773,"children":9774},{},[9775],{"type":38,"value":9743},{"type":29,"tag":475,"props":9777,"children":9778},{},[9779],{"type":38,"value":9780},"Annex I essential requirements; Art. 14",{"type":29,"tag":475,"props":9782,"children":9783},{},[9784],{"type":38,"value":9785},"Conformity assessment plus reporting",{"type":29,"tag":475,"props":9787,"children":9788},{},[9789],{"type":38,"value":9790},"Regulators, CSIRTs",{"type":29,"tag":475,"props":9792,"children":9793},{},[9794,9796],{"type":38,"value":9795},"Low for customers; ",{"type":29,"tag":34,"props":9797,"children":9798},{},[9799],{"type":38,"value":9800},"high for Qpoint's own product compliance",{"type":29,"tag":448,"props":9802,"children":9803},{},[9804,9809,9814,9819,9824,9829],{"type":29,"tag":475,"props":9805,"children":9806},{},[9807],{"type":38,"value":9808},"HITRUST CSF \u002F AI",{"type":29,"tag":475,"props":9810,"children":9811},{},[9812],{"type":38,"value":9813},"Certifiable controls framework",{"type":29,"tag":475,"props":9815,"children":9816},{},[9817],{"type":38,"value":9818},"Requirement statements; e1\u002Fi1\u002Fr2; up to 44 AI statements",{"type":29,"tag":475,"props":9820,"children":9821},{},[9822],{"type":38,"value":9823},"Assessor-validated certification",{"type":29,"tag":475,"props":9825,"children":9826},{},[9827],{"type":38,"value":9828},"US healthcare",{"type":29,"tag":475,"props":9830,"children":9831},{},[9832,9834],{"type":38,"value":9833},"Medium; the AI cert excludes AI ",{"type":29,"tag":101,"props":9835,"children":9836},{},[9837],{"type":38,"value":8647},{"type":29,"tag":448,"props":9839,"children":9840},{},[9841,9845,9849,9854,9858,9863],{"type":29,"tag":475,"props":9842,"children":9843},{},[9844],{"type":38,"value":6421},{"type":29,"tag":475,"props":9846,"children":9847},{},[9848],{"type":38,"value":9710},{"type":29,"tag":475,"props":9850,"children":9851},{},[9852],{"type":38,"value":9853},"93 Annex A controls",{"type":29,"tag":475,"props":9855,"children":9856},{},[9857],{"type":38,"value":9720},{"type":29,"tag":475,"props":9859,"children":9860},{},[9861],{"type":38,"value":9862},"Global buyers",{"type":29,"tag":475,"props":9864,"children":9865},{},[9866],{"type":38,"value":9867},"High for 5.9, 5.10, 5.14, 5.23, 8.11, 8.12, 8.15, 8.16, 8.23",{"type":29,"tag":290,"props":9869,"children":9871},{"id":9870},"_112-evidence-primitives-that-map-across-all-ten",[9872],{"type":38,"value":9873},"11.2 Evidence primitives that map across all ten",{"type":29,"tag":30,"props":9875,"children":9876},{},[9877,9879,9884],{"type":38,"value":9878},"Each artefact below maps to many framework IDs at once. That makes it the right modelling unit: frameworks become ",{"type":29,"tag":101,"props":9880,"children":9881},{},[9882],{"type":38,"value":9883},"views",{"type":38,"value":9885}," over shared evidence.",{"type":29,"tag":440,"props":9887,"children":9888},{},[9889,9910],{"type":29,"tag":444,"props":9890,"children":9891},{},[9892],{"type":29,"tag":448,"props":9893,"children":9894},{},[9895,9900,9905],{"type":29,"tag":452,"props":9896,"children":9897},{},[9898],{"type":38,"value":9899},"Primitive",{"type":29,"tag":452,"props":9901,"children":9902},{},[9903],{"type":38,"value":9904},"What it is",{"type":29,"tag":452,"props":9906,"children":9907},{},[9908],{"type":38,"value":9909},"Main mappings",{"type":29,"tag":468,"props":9911,"children":9912},{},[9913,9934,9955,9976,9997,10018,10039,10060],{"type":29,"tag":448,"props":9914,"children":9915},{},[9916,9924,9929],{"type":29,"tag":475,"props":9917,"children":9918},{},[9919],{"type":29,"tag":34,"props":9920,"children":9921},{},[9922],{"type":38,"value":9923},"P1 AI asset inventory",{"type":29,"tag":475,"props":9925,"children":9926},{},[9927],{"type":38,"value":9928},"Providers, models and versions, harnesses and agents, MCP servers, users, endpoints; first\u002Flast seen; approval state.",{"type":29,"tag":475,"props":9930,"children":9931},{},[9932],{"type":38,"value":9933},"AI RMF GV1.6\u002FMS3.1; 42001 A.4.2\u002FA.4.4; 27001 5.9; AICM UEM-04\u002FSTA-07; AIUC-1 E006; HITRUST \"documenting & inventorying\"; OWASP LLM04\u002FASI04; AI Act inventory baseline; SOC 2 CC3.2",{"type":29,"tag":448,"props":9935,"children":9936},{},[9937,9945,9950],{"type":29,"tag":475,"props":9938,"children":9939},{},[9940],{"type":29,"tag":34,"props":9941,"children":9942},{},[9943],{"type":38,"value":9944},"P2 AI data-flow record",{"type":29,"tag":475,"props":9946,"children":9947},{},[9948],{"type":38,"value":9949},"Data classes × destination provider and region × user\u002Fagent.",{"type":29,"tag":475,"props":9951,"children":9952},{},[9953],{"type":38,"value":9954},"27001 5.14\u002F5.34; AICM DSP-05; AIUC-1 E011\u002FA006; SOC 2 C1.1\u002FP6.1; AI RMF MS2.10; OWASP LLM02",{"type":29,"tag":448,"props":9956,"children":9957},{},[9958,9966,9971],{"type":29,"tag":475,"props":9959,"children":9960},{},[9961],{"type":29,"tag":34,"props":9962,"children":9963},{},[9964],{"type":38,"value":9965},"P3 Policy-as-code with versioning and approval",{"type":29,"tag":475,"props":9967,"children":9968},{},[9969],{"type":38,"value":9970},"Allow\u002Fblock lists, redaction rules, MCP gates; who approved, when.",{"type":29,"tag":475,"props":9972,"children":9973},{},[9974],{"type":38,"value":9975},"27001 5.10; 42001 A.9.2–A.9.4; AIUC-1 E010; SOC 2 CC5.3; AI RMF GV1.x\u002FGV6.1",{"type":29,"tag":448,"props":9977,"children":9978},{},[9979,9987,9992],{"type":29,"tag":475,"props":9980,"children":9981},{},[9982],{"type":29,"tag":34,"props":9983,"children":9984},{},[9985],{"type":38,"value":9986},"P4 Enforcement events",{"type":29,"tag":475,"props":9988,"children":9989},{},[9990],{"type":38,"value":9991},"Block, redact and gate decisions, with the policy version in force.",{"type":29,"tag":475,"props":9993,"children":9994},{},[9995],{"type":38,"value":9996},"SOC 2 CC6.7\u002FCC6.8; 27001 8.11\u002F8.12\u002F8.23; AIUC-1 B006\u002FD003\u002FA008; AI RMF MG2.4; OWASP LLM03\u002FASI02",{"type":29,"tag":448,"props":9998,"children":9999},{},[10000,10008,10013],{"type":29,"tag":475,"props":10001,"children":10002},{},[10003],{"type":29,"tag":34,"props":10004,"children":10005},{},[10006],{"type":38,"value":10007},"P5 Activity logs with retention ≥6 months, tamper-evident",{"type":29,"tag":475,"props":10009,"children":10010},{},[10011],{"type":38,"value":10012},"AI interaction log.",{"type":29,"tag":475,"props":10014,"children":10015},{},[10016],{"type":38,"value":10017},"AI Act Art. 26(6); AIUC-1 E015; 27001 8.15; AICM LOG; HITRUST logging & monitoring; 42001 A.6.2.8",{"type":29,"tag":448,"props":10019,"children":10020},{},[10021,10029,10034],{"type":29,"tag":475,"props":10022,"children":10023},{},[10024],{"type":29,"tag":34,"props":10025,"children":10026},{},[10027],{"type":38,"value":10028},"P6 Alerts and incidents",{"type":29,"tag":475,"props":10030,"children":10031},{},[10032],{"type":38,"value":10033},"New tool, anomalous volume, exfiltration attempt, rogue agent.",{"type":29,"tag":475,"props":10035,"children":10036},{},[10037],{"type":38,"value":10038},"SOC 2 CC7.2–7.4; 27001 8.16\u002F5.24+; AI RMF MG4.3; CRA Art. 14 clock (for manufacturers); OWASP ASI10",{"type":29,"tag":448,"props":10040,"children":10041},{},[10042,10050,10055],{"type":29,"tag":475,"props":10043,"children":10044},{},[10045],{"type":29,"tag":34,"props":10046,"children":10047},{},[10048],{"type":38,"value":10049},"P7 Exceptions and periodic reviews",{"type":29,"tag":475,"props":10051,"children":10052},{},[10053],{"type":38,"value":10054},"Waivers, quarterly access\u002Fvendor reviews.",{"type":29,"tag":475,"props":10056,"children":10057},{},[10058],{"type":38,"value":10059},"SOC 2 CC4.1\u002FCC9.2; 42001 9.1\u002F9.3 inputs; 27001 5.22",{"type":29,"tag":448,"props":10061,"children":10062},{},[10063,10071,10076],{"type":29,"tag":475,"props":10064,"children":10065},{},[10066],{"type":29,"tag":34,"props":10067,"children":10068},{},[10069],{"type":38,"value":10070},"P8 Auditor-grade export",{"type":29,"tag":475,"props":10072,"children":10073},{},[10074],{"type":38,"value":10075},"Full-population, period-bounded, reproducible query, hash; mapped to framework IDs.",{"type":29,"tag":475,"props":10077,"children":10078},{},[10079],{"type":38,"value":10080},"SOC 2 IPE; ISO Stage 2 sampling; HITRUST validated assessment; STAR L2",{"type":29,"tag":290,"props":10082,"children":10084},{"id":10083},"_113-what-qpoint-should-never-claim",[10085],{"type":38,"value":10086},"11.3 What Qpoint should never claim",{"type":29,"tag":30,"props":10088,"children":10089},{},[10090],{"type":38,"value":10091},"These sit outside network or endpoint observation in every framework:",{"type":29,"tag":297,"props":10093,"children":10094},{},[10095,10105,10115,10125,10135],{"type":29,"tag":136,"props":10096,"children":10097},{},[10098,10103],{"type":29,"tag":34,"props":10099,"children":10100},{},[10101],{"type":38,"value":10102},"Organisational governance:",{"type":38,"value":10104}," leadership, accountability, culture, competence and training delivery, management review, internal audit.",{"type":29,"tag":136,"props":10106,"children":10107},{},[10108,10113],{"type":29,"tag":34,"props":10109,"children":10110},{},[10111],{"type":38,"value":10112},"Model development:",{"type":38,"value":10114}," training data, data quality and provenance (AI Act Art. 10, 42001 A.7.2–A.7.4, AICM DSP-24, MDS), model evaluation, bias, robustness, red-teaming (AIUC-1 third-party tests, MEASURE 2).",{"type":29,"tag":136,"props":10116,"children":10117},{},[10118,10123],{"type":29,"tag":34,"props":10119,"children":10120},{},[10121],{"type":38,"value":10122},"Output content safety:",{"type":38,"value":10124}," harmful or out-of-scope outputs, hallucination, misinformation (AIUC-1 C\u002FD001, LLM07, 600-1 content risks).",{"type":29,"tag":136,"props":10126,"children":10127},{},[10128,10133],{"type":29,"tag":34,"props":10129,"children":10130},{},[10131],{"type":38,"value":10132},"Impact and fundamental-rights assessments",{"type":38,"value":10134},", classification judgements, transparency notices and disclosures (Art. 50, AIUC-1 E016).",{"type":29,"tag":136,"props":10136,"children":10137},{},[10138,10143],{"type":29,"tag":34,"props":10139,"children":10140},{},[10141],{"type":38,"value":10142},"Provider-side obligations:",{"type":38,"value":10144}," GPAI obligations, conformity assessment, CE marking, provider logs (Art. 12).",{"type":29,"tag":290,"props":10146,"children":10148},{"id":10147},"_114-role-reality-check",[10149],{"type":38,"value":10150},"11.4 Role reality check",{"type":29,"tag":297,"props":10152,"children":10153},{},[10154,10166,10177,10196],{"type":29,"tag":136,"props":10155,"children":10156},{},[10157,10159,10164],{"type":38,"value":10158},"Qpoint's customers are mostly ",{"type":29,"tag":34,"props":10160,"children":10161},{},[10162],{"type":38,"value":10163},"AI deployers\u002Fusers",{"type":38,"value":10165}," (AICM \"AI Customer\", AI Act \"deployer\"). They are not providers.",{"type":29,"tag":136,"props":10167,"children":10168},{},[10169,10171,10176],{"type":38,"value":10170},"The frameworks that best fit that role are ",{"type":29,"tag":34,"props":10172,"children":10173},{},[10174],{"type":38,"value":10175},"27001, SOC 2, 42001 (scoped to use), AICM (AIC role), NIST AI RMF (GV1.6, MANAGE 3) and AI Act Art. 4\u002F26",{"type":38,"value":120},{"type":29,"tag":136,"props":10178,"children":10179},{},[10180,10182,10187,10189,10194],{"type":38,"value":10181},"AIUC-1 and HITRUST AI Security target ",{"type":29,"tag":34,"props":10183,"children":10184},{},[10185],{"type":38,"value":10186},"providers of AI systems and agents",{"type":38,"value":10188},". For Qpoint customers they are mostly ",{"type":29,"tag":101,"props":10190,"children":10191},{},[10192],{"type":38,"value":10193},"vendor-due-diligence",{"type":38,"value":10195}," artefacts, unless the customer ships agents.",{"type":29,"tag":136,"props":10197,"children":10198},{},[10199,10204],{"type":29,"tag":34,"props":10200,"children":10201},{},[10202],{"type":38,"value":10203},"Qpoint itself",{"type":38,"value":10205},", as a vendor, will face SOC 2 \u002F 27001 requests, the CRA (endpoint agent), and possibly a STAR for AI listing if it adds AI features.",{"type":29,"tag":280,"props":10207,"children":10208},{},[],{"type":29,"tag":284,"props":10210,"children":10212},{"id":10211},"_12-verification-log-what-i-could-not-confirm",[10213],{"type":38,"value":24},{"type":29,"tag":440,"props":10215,"children":10216},{},[10217,10232],{"type":29,"tag":444,"props":10218,"children":10219},{},[10220],{"type":29,"tag":448,"props":10221,"children":10222},{},[10223,10227],{"type":29,"tag":452,"props":10224,"children":10225},{},[10226],{"type":38,"value":910},{"type":29,"tag":452,"props":10228,"children":10229},{},[10230],{"type":38,"value":10231},"Status",{"type":29,"tag":468,"props":10233,"children":10234},{},[10235,10258,10275,10288,10301,10314,10327,10340,10353,10366,10379,10392,10405,10423,10436],{"type":29,"tag":448,"props":10236,"children":10237},{},[10238,10249],{"type":29,"tag":475,"props":10239,"children":10240},{},[10241,10243,10247],{"type":38,"value":10242},"OWASP LLM Top 10 ",{"type":29,"tag":34,"props":10244,"children":10245},{},[10246],{"type":38,"value":456},{"type":38,"value":10248}," exact order and titles",{"type":29,"tag":475,"props":10250,"children":10251},{},[10252,10256],{"type":29,"tag":63,"props":10253,"children":10254},{},[10255],{"type":38,"value":77},{"type":38,"value":10257},": the CSA research note and Imperva agree. The OWASP PDF was not opened. One outlier source placed Misinformation and Hidden Context Exposure differently.",{"type":29,"tag":448,"props":10259,"children":10260},{},[10261,10266],{"type":29,"tag":475,"props":10262,"children":10263},{},[10264],{"type":38,"value":10265},"OWASP Agentic ASI01–ASI10 exact wording",{"type":29,"tag":475,"props":10267,"children":10268},{},[10269,10273],{"type":29,"tag":63,"props":10270,"children":10271},{},[10272],{"type":38,"value":77},{"type":38,"value":10274},": many secondary sources agree. The OWASP page doesn't list them inline.",{"type":29,"tag":448,"props":10276,"children":10277},{},[10278,10283],{"type":29,"tag":475,"props":10279,"children":10280},{},[10281],{"type":38,"value":10282},"AIUC-1 total requirement count",{"type":29,"tag":475,"props":10284,"children":10285},{},[10286],{"type":38,"value":10287},"My count is ~50 active, from the domain pages. AIUC states no total. The Q4 changelog says \"5 new requirements\" but its table lists 2.",{"type":29,"tag":448,"props":10289,"children":10290},{},[10291,10296],{"type":29,"tag":475,"props":10292,"children":10293},{},[10294],{"type":38,"value":10295},"HITRUST AI Security Certification control count (44 vs 55) and standalone vs add-on",{"type":29,"tag":475,"props":10297,"children":10298},{},[10299],{"type":38,"value":10300},"Conflicting HITRUST pages. 44 is documented at v11.4. 55 is a reported press-release figure.",{"type":29,"tag":448,"props":10302,"children":10303},{},[10304,10309],{"type":29,"tag":475,"props":10305,"children":10306},{},[10307],{"type":38,"value":10308},"HITRUST CSF v12 status (AI usage requirements, 42001)",{"type":29,"tag":475,"props":10310,"children":10311},{},[10312],{"type":38,"value":10313},"Planned per the help page; release not found.",{"type":29,"tag":448,"props":10315,"children":10316},{},[10317,10322],{"type":29,"tag":475,"props":10318,"children":10319},{},[10320],{"type":38,"value":10321},"ISO\u002FIEC 42001 amendment (climate Amd 1:2024 or other) and any revision",{"type":29,"tag":475,"props":10323,"children":10324},{},[10325],{"type":38,"value":10326},"Not confirmed. iso.org blocked automated fetch.",{"type":29,"tag":448,"props":10328,"children":10329},{},[10330,10335],{"type":29,"tag":475,"props":10331,"children":10332},{},[10333],{"type":38,"value":10334},"AICM domain names, exact v1.1 list",{"type":29,"tag":475,"props":10336,"children":10337},{},[10338],{"type":38,"value":10339},"Inferred from CCM v4 lineage plus partial confirmations. Control IDs other than AIS-15, MDS-13, DSP-24, SEF-04 and STA-09 are from CCM v4 numbering.",{"type":29,"tag":448,"props":10341,"children":10342},{},[10343,10348],{"type":29,"tag":475,"props":10344,"children":10345},{},[10346],{"type":38,"value":10347},"AICPA TSC↔ISO 27001 mapping covering 2022 Annex A",{"type":29,"tag":475,"props":10349,"children":10350},{},[10351],{"type":38,"value":10352},"Not confirmed.",{"type":29,"tag":448,"props":10354,"children":10355},{},[10356,10361],{"type":29,"tag":475,"props":10357,"children":10358},{},[10359],{"type":38,"value":10360},"NIST AIRC crosswalk list (42001, 23894, EU AI Act)",{"type":29,"tag":475,"props":10362,"children":10363},{},[10364],{"type":38,"value":10365},"Secondary only. airc.nist.gov not fetched.",{"type":29,"tag":448,"props":10367,"children":10368},{},[10369,10374],{"type":29,"tag":475,"props":10370,"children":10371},{},[10372],{"type":38,"value":10373},"EO 14434 number",{"type":29,"tag":475,"props":10375,"children":10376},{},[10377],{"type":38,"value":10378},"From search summary; the order's existence and date are confirmed on whitehouse.gov results.",{"type":29,"tag":448,"props":10380,"children":10381},{},[10382,10387],{"type":29,"tag":475,"props":10383,"children":10384},{},[10385],{"type":38,"value":10386},"MITRE ATLAS current counts (tactics and techniques)",{"type":29,"tag":475,"props":10388,"children":10389},{},[10390],{"type":38,"value":10391},"Conflicting sources.",{"type":29,"tag":448,"props":10393,"children":10394},{},[10395,10400],{"type":29,"tag":475,"props":10396,"children":10397},{},[10398],{"type":38,"value":10399},"CRA Annex III classification of Qpoint-like enforcement agents",{"type":29,"tag":475,"props":10401,"children":10402},{},[10403],{"type":38,"value":10404},"Needs legal analysis.",{"type":29,"tag":448,"props":10406,"children":10407},{},[10408,10413],{"type":29,"tag":475,"props":10409,"children":10410},{},[10411],{"type":38,"value":10412},"Digital Omnibus (data\u002FGDPR\u002FNIS2) status",{"type":29,"tag":475,"props":10414,"children":10415},{},[10416,10418,10422],{"type":38,"value":10417},"Not adopted as of Oct 2026; trilogues reportedly not begun ",{"type":29,"tag":63,"props":10419,"children":10420},{},[10421],{"type":38,"value":77},{"type":38,"value":120},{"type":29,"tag":448,"props":10424,"children":10425},{},[10426,10431],{"type":29,"tag":475,"props":10427,"children":10428},{},[10429],{"type":38,"value":10430},"Global Accreditation Cooperation replacing IAF\u002FILAC (1 Jan 2026)",{"type":29,"tag":475,"props":10432,"children":10433},{},[10434],{"type":38,"value":10435},"Single source.",{"type":29,"tag":448,"props":10437,"children":10438},{},[10439,10444],{"type":29,"tag":475,"props":10440,"children":10441},{},[10442],{"type":38,"value":10443},"Art. 4 penalty exposure",{"type":29,"tag":475,"props":10445,"children":10446},{},[10447,10449,10453],{"type":38,"value":10448},"No specific Art. 99 fine ",{"type":29,"tag":63,"props":10450,"children":10451},{},[10452],{"type":38,"value":87},{"type":38,"value":10454},"; national regimes vary.",1794599475411]