A change reprioritises only: it never re-evaluates (D2) and never touches scope, enforcement or exceptions. Findings keep the severity they were generated with.

The policy is in Enforce for everyone unless an exception says otherwise. An exception sets the mode for an organization, a team or a person; the narrowest one wins, so a person's own exception beats their team's. A person in two teams whose exceptions disagree gets the stricter (D9).

Framework	Control	Shared with	Tracked
OWASP LLM Top 10	LLM03:2025Supply Chain Partial — pin at load; sourcing is build-time	1 other policy	Tracked	framework →
NIST AI RMF	GOVERN 1.6Mechanisms are in place to inventory AI systems Strong — Qpoint's live inventory is the mechanism	1 other policy	Untracked	framework →
NIST AI RMF	GOVERN 6.1Policies and procedures address third-party AI risks Partial — enforcement records prove the policy runs; writing it is yours	3 other policies	Untracked	framework →
NIST AI RMF	GOVERN 6.2Contingency processes handle failures in high-risk third-party data or AI systems Partial — block a failing provider or server; the contingency plan is yours	1 other policy	Untracked	framework →
NIST AI RMF	MANAGE 2.4Mechanisms supersede, disengage or deactivate AI systems that act outside intended use Strong — block a provider, model or MCP server, with timestamped enforcement	2 other policies	Untracked	framework →
NIST AI RMF	MANAGE 3.1Third-party AI risks are monitored and controls applied and documented Strong — third-party AI use is what Qpoint sees	3 other policies	Untracked	framework →
NIST AI RMF	MAP 4.1Risks of AI components, including third-party data and software, are mapped Partial — which data reaches which provider and tool feeds the map	2 other policies	Untracked	framework →
NIST AI RMF	MAP 4.2Internal risk controls for AI components, including third-party, are documented Addressable — the Policy Config is the documented control set	2 other policies	Untracked	framework →
NIST AI RMF	MEASURE 3.1Existing, unanticipated and emergent AI risks are tracked Strong — first-seen tools and models, shadow AI	3 other policies	Untracked	framework →
OWASP Agentic Top 10	ASI04Agentic Supply Chain Vulnerabilities Addressable — inventory, pinning, kill switch	2 other policies	Untracked	framework →
OWASP Agentic Top 10	ASI10Rogue Agents Partial — expected vs observed, and the kill switch	2 other policies	Untracked	framework →
SOC 2	CC3.2Identify and analyze risks Partial — the inventory feeds the risk assessment	1 other policy	Untracked	framework →
SOC 2	CC6.8Prevent or detect unauthorized or malicious software Strong — for unapproved agents, harnesses and MCP servers	2 other policies	Untracked	framework →
SOC 2	CC7.1Detect configuration changes and new vulnerabilities Partial — new tools and versions, first seen	1 other policy	Untracked	framework →

Rows for an untracked framework are dimmed. Tracking one changes no policy and re-evaluates nothing.

No open findings for this policy.

Every auditable change to this policy's configuration. Finding lifecycles point at these rows as their cause.